Description

You will design and implement segmented OT network architectures, transitioning from flat Layer 2 to SD-WAN-enabled, zone-based structures.

This role is on-site.

Responsibilities

• Define network segmentation strategies using the ISA/IEC 62443 zones and conduits model to isolate critical OT assets and control east-west traffic.
• Engineer resilient ring topologies across substations and core OT sites to ensure deterministic communication and fault tolerance.
• Develop SD-WAN design standards covering underlay/overlay architecture, path selection policies, and QoS for ICS protocols.
• Enforce OT-specific cybersecurity controls, including micro-segmentation, firewall zoning, and least-privilege access to prevent lateral movement.
• Lead SD-WAN deployment, integrate with industrial switching infrastructure, and manage high availability mechanisms like redundant paths and failover.

Required Skills

• 15+ years of experience in network architecture, specifically within IT/OT converged environments.
• Deep expertise in SD-WAN implementation, including underlay/overlay architecture and path selection policies based on latency, jitter, and packet loss.
• Strong knowledge of QoS configuration for ICS protocols such as DNP3, Modbus, and IEC 61850.
• Proficiency in designing ring topologies and implementing redundancy (active/active, active/standby, ERPS, MPLS-TP).
• Experience with network segmentation, micro-segmentation, and firewall zoning strategies.
• Familiarity with NERC CIP standards and OT cybersecurity frameworks.
• Ability to conduct risk assessments and lead root cause analysis for network disruptions.

Preferred Skills

• Experience with industrial-grade switch integration and rapid spanning tree protocols.
• Proven track record of delivering complex network transformation projects on time.

Key Skills

Education

Not specified