OPERATIONAL TECHNOLOGY INFRASTRUCTURE ENGINEER

JOB FUNCTION/ PURPOSE

The OT Infrastructure Engineer serves as a hands on technical resource responsible for the design, deployment, administration, support, and standardization of secure Operational Technology (OT) infrastructure environments supporting water, wastewater, and other critical infrastructure systems. This role works closely with project teams, field personnel, customers, and cybersecurity resources to deliver reliable OT systems that support utility and industrial operations. Responsibilities include Windows server and workstation administration, industrial network design, firewall configuration, remote access technologies, virtualization platforms, SCADA, HMI, PLC, and operational technology system connectivity, cybersecurity hardening, communications infrastructure, and lifecycle management

RESPONSIBILITIES

• Install, configure, maintain, patch, upgrade, and secure Windows Server and Workstation operating systems supporting OT environments.
• Configure and support Microsoft Active Directory, DNS, DHCP, Group Policy, and related infrastructure services.
• Install, configure, and support virtualization platforms including VMware ESXi, vSphere, and Hyper-V.
• Design, deploy, support, and troubleshoot industrial network infrastructure, including switching, routing, firewalls, VPNs, wireless, and cellular communications.
• Design, deploy, support, and migrate secure remote access solutions, including IPsec VPN technologies, BeyondTrust, and approved remote connectivity platforms
• Support SCADA, HMI, PLC, alarming, telemetry, and operational technology system communications and connectivity.
• Configure and support remote site communications technologies, including cellular modems, Sierra Wireless devices, enterprise text messaging services, and associated connectivity platforms.
• Provide technical input for infrastructure design, hardware selection, project estimates, and customer solutions.
• Evaluate and implement technologies that improve system reliability, maintainability, operational performance, and cybersecurity.
• Develop and maintain network diagrams, configuration standards, installation documentation, and support procedures.
• Implement and support cybersecurity controls including system hardening, vulnerability remediation, endpoint protection, certificate management, and secure remote access technologies.
• Provide remote and onsite support for customer OT infrastructure environments.
• Support startup, commissioning, warranty, managed services, and incident response activities.
• Perform troubleshooting and root cause analysis for infrastructure, communications, and system issues.
• Train customers, operators, and internal personnel on supported technologies, support processes, and security best practices.
• Support server, workstation, networking, firewall, and remote access standardization efforts across customer environments.

EDUCATION and EXPERIENCE

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field preferred; equivalent experience may be considered.
• 5+ years of experience supporting information technology, operational technology, industrial network, or utility environments.
• Experience deploying, administering, and supporting server, workstation, network, and virtualization technologies.
• Experience supporting customer facing projects, field deployments, and operational support activities.
• Water, wastewater, industrial, SCADA, or critical infrastructure experience preferred.

KNOWLEDGE, SKILLS, and ABILITIES

• Strong knowledge of Windows Server, Windows Workstation, Active Directory, DNS, DHCP, Group Policy, patch management, system hardening, and Microsoft infrastructure services.
• Strong knowledge of virtualization, backup, and recovery technologies, including VMware ESXi, vSphere, Hyper-V, Veeam, Synology, and related infrastructure platforms.
• Strong understanding of industrial and enterprise networking concepts including routing, switching, VLANs, VPNs, firewall policies, wireless networking, cellular communications, network security, and secure remote access technologies.
• Working knowledge of industrial networking and security platforms, including Fortinet Firewalls, FortiSwitch, FortiAP, FortiExtender, FortiSIEM, FortiNAC, Cisco, Allen-Bradley Stratix, Hirschmann, Siemens, and similar technologies.
• Ability to design, deploy, maintain, support, and troubleshoot industrial network infrastructure, remote access solutions, firewall architectures, and secure connectivity environments.
• Working knowledge of operational technology (OT), SCADA, HMI, PLC, industrial automation systems, industrial communications, telemetry systems, alarming platforms, remote access technologies, and remote site connectivity solutions.
• Understanding of OT cybersecurity principles, including system hardening, vulnerability remediation, endpoint protection, certificate management, network segmentation, secure remote access, and defense-in-depth architectures.
• Working knowledge of cybersecurity frameworks and industry best practices applicable to utility and industrial environments, including NIST CSF, ISA/IEC 62443, AWWA guidance, and EPA cybersecurity recommendations.
• Ability to develop and maintain technical documentation, network diagrams, configuration standards, installation records, and operational procedures.
• Strong analytical, troubleshooting, and root cause analysis skills across servers, workstations, network infrastructure, virtualization platforms, communications systems, and OT environments.
• Ability to support customer-facing projects, managed services, field operations, and utility infrastructure environments.
• Ability to support startup, commissioning, maintenance, incident response, and operational activities in utility and industrial environments.
• Strong verbal and written communication skills with the ability to effectively interact with customers, vendors, project teams, and operational personnel.
• Ability to manage multiple priorities and projects while working independently and collaboratively across technical and operational teams.
• Industry certifications such as Microsoft Windows Server Administrator, Microsoft Azure Administrator, Fortinet NSE, Cisco CCNA/CCNP, VMware VCP, ISA/IEC 62443 Cybersecurity Certificate, CompTIA Network+, CompTIA Security+, CISSP, Rockwell Automation, Siemens, Hirschmann, or equivalent technical certifications are preferred.
• Familiarity with operational support platforms and services including Microsoft 365, Rackspace, enterprise messaging services, and communication technologies used for SCADA alarm and operational notification systems.
• Familiarity with database technologies commonly used in OT environments, including Microsoft SQL Server, MySQL, PostgreSQL, and related platforms.

PHYSICAL DEMANDS

• Ability to sit, stand, and work at a computer for extended periods.
• Ability to lift and move computer, networking, and related technology equipment as needed.
• Ability to travel to and work at customer facilities, including indoor and outdoor utility, industrial, and critical infrastructure environments.
• Ability to travel up to 25% to support customer projects, commissioning, troubleshooting, training, and operational support activities.

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential job functions.

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.