Senior IT/OT Network Architect

Job Description:
Architecture & Design
Design and implement a segmented OT network architecture transitioning from flat Layer 2 networks to SD-WAN-enabled, zone-based architectures.
Define network segmentation strategy (ISA/IEC 62443 zones and conduits model) to isolate critical OT assets and control east-west traffic.
Engineer ring and/or resilient topologies across substations and core OT sites to ensure deterministic communication and fault tolerance.
Develop SD-WAN design standards including:
Underlay/overlay architecture
Path selection policies (latency, jitter, packet loss)
QoS for ICS protocols (e.g., DNP3, Modbus, IEC 61850)

Security & Compliance:
Develop and enforce OT-specific cybersecurity controls, including micro-segmentation, firewall zoning, and least-privilege access.
Define and implement firewall policies to restrict inter-zone communication and prevent unauthorized access to OT systems.
Conduct risk and vulnerability assessments aligned with OT threat models (ransomware, lateral movement, supply chain risks).
Ensure compliance with NERC CIP standards and other applicable frameworks.

Implementation & Operations:
Lead deployment of SD-WAN solutions across OT sites, including integration with existing switching infrastructure (e.g., industrial-grade switches).
Configure and maintain high availability mechanisms:
Redundant paths and failover (active/active or active/standby)
Rapid spanning tree / ERPS / MPLS-TP where applicable
Support incident response and root cause analysis for OT network disruptions.
Manage projects and deliver on time with periodic status reports to management.