IT/OT Control Engineer

Job Title: IT/OT Control Engineer

Department: Engineering

Reports To: Director of Engineering

Type of position: Full-time 

FLSA Status: Exempt

Position Overview

Plant-IQ is seeking an IT/OT Control Engineer to join our Engineering team in our Buffalo, NY office. This role is central to helping our Infrastructure market clients; including Water, Wastewater, and Utilities. You will be responsible for designing, securing, and maintaining the networks and control systems that keep their operations running. The ideal candidate has strong knowledge of IT and OT network design along with PLC and control systems experience. The IT/OT Control Engineer will work closely with clients to assess existing infrastructure, architect secure IT/OT network solutions, and integrate cybersecurity best practices into control system design and implementation. You will collaborate with project engineers and controls programmers to deliver solutions that are completed within budget and on schedule, meet the client’s requirements, and comply with industry cybersecurity standards.

Duties and responsibilities

• Design, document, and implement secure IT/OT network architectures for industrial control system (ICS) and SCADA environments, including network segmentation, firewalls, VLANs, and DMZs.
• Assess client OT network and control system environments to identify cybersecurity risks and recommend remediation strategies aligned with client needs and industry standards (e.g., NIST, IEC 62443).
• Support PLC and SCADA system design, configuration, and integration, working alongside project engineers on control panel and system architecture.
• Develop and maintain network diagrams, cybersecurity documentation, risk assessments, and system hardening guidelines for client deliverables.
• Research, reading, and learning new technologies for technical solutions.
• Assist clients, primarily in the Water, Wastewater, and Utilities sectors, with cybersecurity compliance efforts and infrastructure modernization initiatives.
• Configure and support switches, routers, firewalls, and remote access solutions for secure connectivity between IT and OT networks.
• Collaborate with project engineers and controls programmers to identify client requirements and provide technical solutions that meet or exceed client's needs.
• Responsible for client communication through written, web conference, workshops, phone, and in person mediums.
• Visit customer sites to review network and control system architecture, perform assessments, or obtain detailed information on existing plant and network conditions.
• Attend in-office meetings as required, conference calls with team members, or in-office client meetings to review project status as it progresses through project workflow and ultimate deployment.
• Conduct on-site or on-line service calls or project meetings as required to implement network or system changes and/or perform hardware or software modifications supplied for start-up (SAT).
• Support incident response and troubleshooting for OT network and cybersecurity related issues.
• Read and interpret specifications, network diagrams, and plans to determine contract requirements and communicate and execute solutions based on specifications and clarifications.
• Attend training or conferences as required to stay current on evolving IT/OT cybersecurity threats, tools, and standards.
• May supervise the activity of support services engineers assigned to the project.
• Provide customer support as required.
• Any other duties as assigned by management.

Qualifications

• Must be eligible to work in the U.S. with a valid Driver's License and reliable transportation.
• Punctual for work, internal and external meetings, appointments, and other work related functions.
• Strong knowledge of IT and OT network design, including segmentation, firewalls, switches, routers, and secure remote access for industrial environments.
• Solid understanding of PLC platforms and control system architecture; ability to work with project engineers on system integration.
• Excellent performance and problem-solving skills in potentially stressful environments are essential.
• Strong interpersonal skills for collaboration and teamwork as well as a high attention to detail and follow through.
• Ability and willingness to accept self-study courses to improve skill sets is required.
• Ability to read and interpret network diagrams, PLC wiring diagrams, Control Narratives and P&ID Drawings.
• Familiarity with industrial cybersecurity standards and frameworks (e.g., Purdue Model,NIST Cybersecurity Framework, IEC 62443) is preferred.
• Prior experience with PLC platforms (Codesys/Open IEC 61131, Rockwell Automation Logix 500 & 5000, Siemens TIA Portal, Modicon) preferred.
• Prior experience with SCADA platforms (GE Proficy/iFix, RS FT View, Aveva Indusoft/Wonderware, Iconics Genesis) preferred.
• Electrical and process control knowledge is preferred.
• A basic understanding of NEC code and UL508A requirements is preferred.
• Ability to read electrical and mechanical schematics preferred.
• Physical requirements include: lifting up to 25lbs, able to pick-up material at floor level, able to lift items above shoulder height, and able to stand or walk for extended periods of time.
• May on occasion, be called upon by client commitments and/or emergencies to perform work duties, after hours, weekends or holidays to restore client process and network operations.

Education and/or Experience

• BS in Computer Science, Network Engineering, Electrical Engineering, or a related technical field, or equivalent educational background.
• Minimum 3-5 years of applicable work experience in IT/OT network engineering, industrial cybersecurity, or controls engineering required.
• Experience with industrial control system (ICS) and SCADA network architecture in the Water, Wastewater, or Utilities sectors is strongly preferred.
• Relevant industry certifications (e.g., CompTIA Security+, CISSP, GICSP, Cisco CCNA) are preferred.

Contact: HR@Plant-IQ.com