OT System Administrator

About LS Power:

Founded in 1990, LS Power is a premier development, investment, and operating company focused on the North American power and energy infrastructure sector, with leading platforms across generation, transmission and energy expansion solutions. Since inception, LS Power has developed or acquired 50,000 MW of power generation, including utility-scale solar, wind, hydro, battery energy storage, and natural gas-fired facilities. Through its transmission business, LS Power Grid, the company built and operates 780+ miles of high-voltage transmission and 7 transmission utilities and has another 375+ miles currently in construction or development. LS Power actively invests in and scales businesses that are meeting the growing needs of the energy expansion, including electric vehicle charging, demand response, microgrids, renewable fuels and waste-to-energy platforms. Over the years, LS Power has raised more than $76 billion in debt and equity capital to support North American infrastructure.

Our Purpose, Mission, & Values:

Our Purpose is to solve complex energy problems that improve the world

Our Mission is to make lives better by developing a cleaner and more reliable energy ecosystem

Our Values are the willingness to participate in and help strengthen our culture of integrity, Innovation, Teamwork, and Taking Ownership

Our People create value and are our Most Valuable asset.  We take our values of Integrity, Innovation, Teamwork and Taking Ownership seriously and ask candidates to think about how they can help us further enhance our culture with their specific skillsets, capabilities and experiences.

Benefits

We provide our team the opportunity to share their unique perspectives, solve new challenges, and continue in their career growth. We are committed to supporting employees’ happiness, healthiness, and overall well-being by providing comprehensive benefits that include 100% employer paid premium healthcare, paid parental leave and more.

About the Role

As the OT System Administrator, you will be a foundational member of LS Power Grid’s Operational Technology security team, responsible for the secure, reliable administration of servers, infrastructure, and supporting platforms across critical grid operations. Your work will directly underpin the availability and integrity of systems that control and monitor the transmission grid — making your role essential to both operational continuity and regulatory compliance.

This role spans the full breadth of enterprise systems administration: Windows and Linux server management, VMware virtualization, NetApp storage, RSA authentication, enterprise backup and recovery, and the supporting infrastructure that keeps OT environments stable and audit-ready. You will work closely with OT Security, Network Operations, and Compliance teams under NERC CIP requirements, owning system lifecycle activities from initial build and configuration through ongoing administration, patching, and incident response.

This is a high-impact role where your technical depth and documentation discipline will directly support the safe and reliable operation of the power grid.

What Will You Do

System Administration & Operations

• Administer and maintain Windows Server and Linux systems supporting OT environments, including control centers, ancillary applications, and field-connected infrastructure.
• Manage VMware virtualization platforms (vSphere, ESXi, vCenter) including virtual machine provisioning, template management, resource allocation, and performance tuning.
• Administer NetApp storage infrastructure including volume provisioning, snapshot management, replication configuration, and capacity planning.
• Manage RSA authentication infrastructure, including token administration, user provisioning, and integration with OT access control systems.
• Perform routine system health checks, capacity monitoring, and performance tuning across OT-connected servers, applications, and storage platforms.
• Provide scheduled on-call and incident response support for OT systems as part of a 24/7 rotation.

Endpoint, Server & Field Device Build/Deploy

• Build, image, configure, and deploy Windows-based workstations and field devices, including Remote Terminal Units (RTUs), for control center and field site environments.
• Build and deploy physical servers and rack infrastructure, including hardware configuration, OS installation, hardening, and integration into OT environments.
• Build and provision virtual servers within VMware environments from template or bare configuration through production-ready baseline.
• Maintain standardized build documentation and configuration baselines for all endpoint, server, and field device types.
• Coordinate field deployments with OT operations teams to minimize operational impact during installation and cutover activities.
• Manage physical hardware assets including procurement coordination, imaging, asset tracking, and compliant end-of-life disposal.

Patch Management & System Hardening

• Apply vendor-released security patches and updates.
• Monitor FoxGuard advisories and vendor security bulletins on a weekly basis to assess patch criticality and prioritize remediation.
• Implement and maintain system hardening configurations aligned to internal security baselines across Windows, Linux, and virtualization platforms.
• Maintain auditable patch records and configuration baselines to support compliance reviews and audit evidence requests.
• Utilize enterprise patch management tools (e.g., IBM BigFix) for deployment tracking and compliance reporting.

Backup, Recovery & Continuity

• Administer enterprise backup solutions (Veeam and/or Commvault) for OT systems, including job configuration, retention policy management, and schedule verification.
• Perform and document backup verification and restoration testing in compliance with CIP-009 requirements.
• Support disaster recovery planning, execution, and documentation for critical OT infrastructure.
• Coordinate with NetApp replication and snapshot capabilities to support backup redundancy and rapid recovery objectives.

Security & Compliance

• Support compliance with NERC CIP standards, including but not limited to CIP-007, CIP-008, and CIP-009.
• Integrate system logs with Splunk for centralized visibility and alerting; conduct weekly log reviews to identify anomalies and support incident detection.
• Track incidents and compliance evidence in AssurX (or equivalent compliance tracking platform); participate in CIP-008 Security Incident Response Team (SIRT) exercises.
• Collect and maintain audit evidence for technical controls, including patch records, configuration baselines, and security event logs.
• Assist with vulnerability remediation, configuration reviews, and coordination with OT Security and Compliance teams during audits and regulatory assessments.
• Administer endpoint protection (e.g., Symantec) and support security event monitoring activities.

Identity & Access Management

• Manage Active Directory infrastructure including user account lifecycle, group membership, and organizational unit structure.
• Configure and maintain Group Policy Objects (GPOs) to enforce security settings and system configuration standards.
• Administer DNS services, RSA authentication services, and privileged access management (PAM) controls.
• Conduct regular access reviews to ensure least-privilege principles are maintained across OT-connected systems.

Application, Database & File Services

• Support OT applications and services, including system dependencies, integrations, and service availability.
• Administer Microsoft SQL Server instances supporting OT-connected applications, including routine maintenance, backup configuration, performance monitoring, and availability management.
• Manage enterprise file shares, SharePoint, and document management systems (e.g., LaserFiche) including permissions, quotas, and retention policies.
• Support application teams with database connectivity, instance health, and escalated troubleshooting for SQL Server-dependent OT systems.

Change & Configuration Management

• Execute system changes through approved change management processes, including documentation of pre-change baselines and rollback procedures.
• Maintain accurate and current system documentation including architecture diagrams, configuration standards, and operational runbooks.
• Participate in bi-weekly technical reviews of system changes impacting compliance or OT operations.

We Want You on Our Team Because You Have…

• Bachelor of Science in Information Technology, Computer Science, Engineering, or a related field; in lieu of degree, 8+ years of directly applicable IT/OT systems administration experience.
• 5+ years of experience in systems administration in regulated, mission-critical, or industrial environments.
• Strong hands-on experience administering both Windows Server and Linux systems, including configuration, hardening, and lifecycle management.
• Demonstrated experience with VMware virtualization platforms (vSphere, ESXi, vCenter), including virtual machine build, provisioning, and day-to-day administration.
• Hands-on experience with NetApp storage administration, including volume management, snapshots, and replication.
• Experience administering enterprise backup solutions such as Veeam or Commvault, including restore testing and documentation.
• Demonstrated experience building and deploying physical servers, Windows-based workstations, and field devices from bare metal through production-ready configuration.
• Working knowledge of RSA authentication infrastructure and enterprise identity and access management practices.
• Solid working knowledge of Microsoft SQL Server administration, including routine maintenance, performance monitoring, and availability support for application-connected instances.
• Excellent written and verbal communication skills with the ability to document and communicate across all organizational levels.
• Self-motivation, discipline, and strong organizational and critical-thinking skills suited to a regulated environment.
• Willingness to participate in scheduled on-call rotations supporting 24/7 OT system coverage.

Ideally, You Also Have…

• Bachelor’s degree in Information Technology, Computer Science, Engineering, or equivalent work experience.
• Direct experience supporting Operational Technology (OT), SCADA, EMS, or industrial control system (ICS) environments.
• Experience building, configuring, or maintaining Remote Terminal Units (RTUs) or other Windows-based field devices in an OT or utility environment.
• Familiarity but not limited to NERC CIP standards and compliance documentation requirements (CIP-007, CIP-008, CIP-009).
• Familiarity with Splunk for log aggregation and security event monitoring.
• Familiarity with Nessus Security Center and vulnerability management.
• Familiarity with Tripwire Enterprise and configuration monitoring.
• Experience with IBM BigFix, Symantec Endpoint Security, or Avigilon ACM platforms.
• Familiarity with compliance tracking and incident documentation platforms (e.g., AssurX).
• Prior experience in electric transmission, energy, or critical infrastructure environments.
• Active security certification such as CompTIA Security+, Microsoft MCSA/MCSE, VMware VCP, or equivalent.

What Success Looks Like

• Within 3 Months: You’ll have taken ownership of your assigned systems, familiarized yourself with LS Power’s OT environment and NERC CIP compliance requirements, and established working relationships with OT Security, Network Operations, and Compliance stakeholders.
• Within 6 Months: You’ll be independently managing day-to-day system administration across Windows, Linux, VMware, NetApp, and backup platforms, contributing to patch coordination and change management processes with minimal direction.
• Within 12 Months: You’ll be a trusted systems authority within the OT team, with well-documented baselines, measurably improved audit readiness, and the confidence to support NERC CIP audits and internal reviews with organized, complete evidence.