Description

Title: Senior IT/OT Network Architect 

Work Authorization: GC (PP number must)/Citizen 

Experience:15+

Work Location: Manassas, VA 

Job Description:

Architecture & Design 

• Design and implement a segmented OT network architecture transitioning from flat Layer 2 networks to SD-WAN-enabled, zone-based architectures. 
• Define network segmentation strategy (ISA/IEC 62443 zones and conduits model) to isolate critical OT assets and control east-west traffic. 
• Engineer ring and/or resilient topologies across substations and core OT sites to ensure deterministic communication and fault tolerance. 
• Develop SD-WAN design standards including: 
• Underlay/overlay architecture 
• Path selection policies (latency, jitter, packet loss) 
• QoS for ICS protocols (e.g., DNP3, Modbus, IEC 61850) 

Security & Compliance:

• Develop and enforce OT-specific cybersecurity controls, including micro-segmentation, firewall zoning, and least-privilege access. 
• Define and implement firewall policies to restrict inter-zone communication and prevent unauthorized access to OT systems. 
• Conduct risk and vulnerability assessments aligned with OT threat models (ransomware, lateral movement, supply chain risks). 
• Ensure compliance with NERC CIP standards and other applicable frameworks. 

Implementation & Operations: 

• Lead deployment of SD-WAN solutions across OT sites, including integration with existing switching infrastructure (e.g., industrial-grade switches). 
• Configure and maintain high availability mechanisms: 
• Redundant paths and failover (active/active or active/standby) 
• Rapid spanning tree / ERPS / MPLS-TP where applicable 
• Support incident response and root cause analysis for OT network disruptions. 
• Manage projects and deliver on time with periodic status reports to management.

Key Skills

Education

Not specified