OT Network Engineer

The OT Network Engineer is responsible for designing, deploying, and maintaining Cisco-based network infrastructure across AES US Renewables operational technology (OT) environments. This role ensures reliable, secure connectivity between data centers, substations, and field sites supporting renewable energy operations.

The position requires hands-on expertise in Cisco routing, switching, and firewall technologies, along with a strong understanding of SCADA network integration, IT/OT network segmentation, and cybersecurity compliance (e.g., NERC CIP). The engineer will collaborate across IT, OT, Cybersecurity, and Operations teams to deliver high-availability network services that support safe and efficient power generation.

Primary Responsibilities

Network Design & Deployment

• Design and deploy Cisco network infrastructure (routers, switches, and firewalls) across multiple renewable energy sites
• Configure and maintain Cisco Firepower/FTD firewalls and Cisco SD-WAN architecture
• Build and monitor IPsec/GRE tunnels between data centers, substations, and field devices
• Ensure high availability and redundancy across primary and secondary data centers

Site Connectivity & SCADA Integration

• Manage site connectivity including private circuits, LTE failover, and remote access solutions
• Support SCADA network integration and ensure proper segmentation between IT and OT networks
• Coordinate with vendors for network commissioning, circuit turn-up, and troubleshooting

Monitoring, Security & Compliance

• Implement network monitoring, logging, and alerting for uptime and security
• Assist in cybersecurity compliance activities (e.g., NERC CIP or company internal policies)
• Support controlled change management processes and scheduled maintenance windows

Documentation & Collaboration

• Maintain accurate network documentation, IP address plans, and device inventory
• Participate in infrastructure and compliance-related projects (e.g., network upgrades, site expansions, datacenter migrations)
• Communicate clearly with technical and non-technical stakeholders

Qualifications

• Bachelor’s Degree (Information Technology / Computer Science / Network Engineering) preferred or equivalent with relevant work experience required.

5 years’ experience to include:

• Cisco network engineering (routing, switching, and firewalls)
• Experience with Cisco Firepower/FTD, ASA, and SD-WAN platforms
• Strong knowledge of IPsec/GRE VPN tunnels, BGP, OSPF, and VLAN architecture, and routing protocols (BGP, OSPF, EIGRP).
• Familiarity with network monitoring tools (e.g., SolarWinds, PRTG, or similar)
• Solid grasp of firewall rules, security zones, and remote access configurations
• Experience working in regulated or compliance-driven environments
• Strong written and verbal communication skills
• Ability to work independently and manage multiple technical responsibilities
• Physical ability to lift and maintain 70 LBS for short period of time
• Ability to climb a ladder over 4 feet
• Have reliable transportation
• Able to travel up to 25% and in field environments during project commissioning and support remote site deployment.

Additional Qualifications

• Cisco certifications (CCNA, CCNP, or equivalent)
• Experience working with industrial communication protocols (Modbus, DNP3, IEC 61850)
• Experience supporting NERC CIP compliance in OT/ICS environments
• Familiarity with SCADA protocols and IT/OT convergence
• Experience with LTE/cellular failover and remote-access VPN solutions
• Knowledge of AES infrastructure standards and operational practices