Network Security Engineer

About Middle River Power

Middle River Power (MRP) is a private equity-sponsored energy platform specializing in the investment and asset management of U.S. power generation facilities. With over 8 GW of natural gas, coal, battery storage, and solar assets across multiple states, MRP is committed to safe, reliable, and efficient operations.

Backed by experienced leadership and a data-driven approach, MRP fosters a culture of collaboration, innovation, and continuous improvement. We value talented individuals who bring curiosity, accountability, and a commitment to excellence.

Position Summary

Middle River Power is seeking an experienced, hands-on Network Engineer to design, maintain, and secure the network infrastructure supporting our Chicago corporate office and growing portfolio of power generation and battery storage facilities across the United States.

Reporting to the Director of Information Technology, this position will partner closely with IT, Operations, plant personnel, and external service providers to ensure reliable connectivity, network security, and standardized infrastructure across our fleet. The Network Engineer will primarily support Midwest and East Coast facilities, with additional support for West Coast operations as needed.

The ideal candidate brings strong technical expertise, experience managing multi-site networks, and a proactive, solutions-oriented approach to working in a fast-paced, private equity-backed environment.

Key Responsibilities

Network Operations & Infrastructure

• Administer, monitor, and troubleshoot corporate and plant networks, including firewalls, switches, wireless infrastructure, routing, VPNs, and WAN connectivity.
• Serve as an escalation point for network-related issues, including participation in after-hours support and scheduled maintenance.
• Manage network connectivity providers, troubleshoot service interruptions, and maintain reliable remote connectivity between plant facilities and control locations.
• Monitor network performance, identify opportunities for improvement, and support infrastructure reliability across multiple locations.

Network Security & Compliance

• Maintain firewall configurations, network segmentation, and secure remote access across corporate, plant, vendor, and external networks.
• Implement and support IT/OT network segmentation using VLANs, security zones, and the Purdue Model.
• Administer privileged and vendor remote access, including access reviews and restrictions.
• Support vulnerability remediation, firmware updates, security assessments, and applicable NERC CIP Low Impact compliance requirements.

Network Standardization & Projects

• Develop and implement standardized network designs across facilities, including firewall redundancy, connectivity diversity, and hardware configurations.
• Support the transition from legacy network infrastructure, including Cisco equipment, to a standardized Fortinet environment.
• Configure, test, and deploy network equipment while coordinating installations and cutovers around approved maintenance windows.
• Lead network onboarding and integration activities for newly acquired facilities and support broader IT modernization initiatives.

Cross-Functional Collaboration & Documentation

• Partner with Operations and plant leadership to coordinate network changes in accordance with site safety procedures, operational requirements, and change management processes.
• Collaborate with managed service providers, equipment vendors, and internal stakeholders to resolve issues and deliver projects.
• Maintain accurate network diagrams, device inventories, configuration backups, port maps, and change documentation.
• Ensure network infrastructure supports business continuity, operational reliability, and long-term organizational growth.

Required Qualifications

• 5–7 years of hands-on network engineering experience, preferably supporting multiple locations or distributed infrastructure.
• Strong experience with next-generation firewalls, preferably Fortinet (FortiGate, FortiManager, FortiAnalyzer); experience with Palo Alto or Cisco also considered.
• Proficiency in routing, switching, VLANs, OSPF/BGP, VPNs, NAT, DHCP/DNS, and wireless networking.
• Experience implementing network segmentation, firewall policies, and secure remote access solutions.
• Working knowledge of network monitoring, logging, troubleshooting, and configuration management tools.
• Strong technical documentation, analytical, and problem-solving skills.
• Ability to collaborate with technical and nontechnical stakeholders and manage competing priorities.
• Willingness to travel regularly to plant facilities and work safely in industrial environments.
• Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent professional experience.

Preferred Qualifications

• Experience supporting industrial or operational technology (OT) networks, including SCADA, DCS, PLC, or historian environments.
• Background in power generation, utilities, energy, or similar critical infrastructure industries.
• Familiarity with NERC CIP, IEC 62443, and Purdue Model network architecture.
• Fortinet NSE certification (NSE 4 or higher), CCNA, or CCNP.
• Experience with FortiSwitch, FortiAP, FortiPAM, and Cisco-to-Fortinet migrations.
• Exposure to Microsoft Azure networking, Microsoft 365, and Entra ID.
• Experience integrating networks following acquisitions or supporting multi-site infrastructure expansion.
• Familiarity with scripting or network automation using Python or PowerShell.

Technical Environment

MRP operates a combination of corporate IT and industrial network infrastructure, with an ongoing focus on standardization and security.

• Network & Security: FortiGate, FortiManager, FortiAnalyzer, FortiPAM, FortiSwitch, FortiAP, and Cisco.
• Connectivity: Fiber, broadband, cellular, satellite, and site-to-site VPN.
• Cloud & Identity: Microsoft Azure, Microsoft 365, Entra ID, and Intune.
• Security Monitoring: Microsoft Sentinel, Microsoft Defender, and Darktrace.
• Operational Technology: Networks supporting DCS, SCADA, PLC, and AVEVA PI systems.

Work Environment & Travel

• Based in MRP's Chicago corporate office, with approximately 30–40% travel to power generation and battery storage facilities. This is on-site role no hybrid or remote
• Travel requirements may increase during site onboarding, infrastructure upgrades, or network cutovers.
• Standard business hours with occasional after-hours support, on-call responsibilities, and scheduled maintenance windows.
• Plant visits may require personal protective equipment (PPE), safety training, and work in industrial or outdoor environments.

Compensation & Benefits

Middle River Power offers a competitive base salary commensurate with experience, along with eligibility for an annual performance-based bonus.

Our comprehensive benefits package includes medical, dental, and vision insurance, a 401(k) retirement plan with company match, paid time off, paid holidays, and additional company-sponsored benefits.

Equal Employment Opportunity

Middle River Power is an Equal Opportunity Employer. We are committed to providing equal employment opportunities to all qualified applicants and employees without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other characteristic protected by applicable law.