CIP Compliance Network Engineer

As an NRG employee, we encourage you to take charge of your career and development journey. We invite you to explore exciting opportunities across our businesses. You’ll find that our dynamic work environment provides variety and challenge. Your growth is key to our ongoing success—take the lead in shaping your career development, goals and future!

Job Summary:

• The Critical Infrastructure Protection (CIP) Network Analyst has responsibility for maintenance, security, and CIP compliance of network equipment at the enterprise level. Scope includes network segmentation and VPN design, executing CIP compliance activities such as patch assessments on network equipment, change control, disaster recovery testing, cyber vulnerability assessments, and logical segmentation analysis.

Essential Duties/Responsibilities:

• Network design and implementation for secure networks relating to NERC CIP compliance and cyber security of the fleet.

• Network segmentation and protection to meet compliance goals.

• Working independently, perform and/or coordinate all site-specific activities, tests and controls for meeting program requirements and ongoing compliance of Fortinet network infrastructure.

• Utilize tools such as FortiManager, FortiAnalyzer, FortiSIEM to monitor and maintain the operation and security of the Fortinet infrastructure.

• Assist in preparation for various audits and act as subject matter expert (SME)

• Lead the maintenance of the CIP network policies and procedures such as change control procedures, back-up, and disaster recovery plans.

• Serve as SME on hardware, software, and control architectures for CIP.

• Utilize best practices and knowledge of internal/external issues to improve or recommend technical or compliance solutions.

• Monitor electronic perimeters for potential breaches/vulnerabilities and act as first responder for any potential incident.

• Provide input for detailed analysis, diagnosis and mitigation based upon findings and deficiencies for operational or compliance issues.

• Through cross training, provide backup activities and response for the CIP team.

Working Conditions:

• Majority of work by telecommuting

• Open office environment, plant or datacenter as needed.

• Some overtime required as special projects arise.

• Travel up to 20%

Minimum Requirements:

• 2 years of experience operating and maintaining next generation firewalls. (Fortinet preferred)

• 5 years of experience in implementation and administration of LAN/WAN/Internet networks and services.

Preferred Qualifications:

• Experience designing, securing, and maintaining networks using Fortinet Firewalls.

• Experience maintaining security applications such as intrusion prevention, antivirus, patch assessment, security incident and event management (SIEM)

• Experience in a NERC CIP Low program development and execution

• Experience with Routing, Switching, Datacenters, VPN, LAN, WAN, Wireless, Network Security, Intrusion Detection, and Anti-Virus.

• Power industry or other industrial experience in an IT/OT environment.

• Experience working with Ovation, T3000, Symphony +, or GE Control Systems

• Experience working with Nozomi, Dragos, Tenable OT, Darktrace, Claroty, or similar product.

Additional Knowledge, Skills and Abilities:

• Working knowledge of cybersecurity and security tools

• Demonstrated ability to communicate (verbal and written) with all levels of internal and external customers.

• Demonstrated project management skills.

• Demonstrated ability to work independently and as a team member.

• Demonstrated ability to set priorities and to respond to changing demands from multiple sources.

• Ability to exercise discretion and independent judgment in applying established techniques, procedures, or standards.

• Demonstrated analytical and problem-solving skills.

• Ability to work in power plant, data center, or office environment as needed.

• Experience maintaining servers.

• Understanding of Citrix and VMWare

Physical Requirements:

• Occasionally requires lifting as appropriate to perform duties and responsibilities.

Salary offered will be commensurate with the successful candidate’s education and/or experience and consistent with the job location’s market pay rate.

NRG Energy is committed to a drug and alcohol-free workplace. To the extent permitted by law and any applicable collective bargaining agreement, employees are subject to periodic random drug testing, and post-accident and reasonable suspicion drug and alcohol testing. EOE AA M/F/Protected Veteran Status/Disability. Level, Title and/or Salary may be adjusted based on the applicant's experience or skills.

EEO is the Law Poster (The poster can be found at

Official description on file with Talent.