Operational Technology Network Engineer

TM Process & Controls, Inc. is a full-service design-build company that provides custom process and automation solutions to a wide range of manufacturing industries. Our employees' technical design and hands-on field experience has developed, executed, and commissioned technical solutions throughout the United States and the Caribbean. We are a fast-growing process & process controls company in search of a talented individual who would like to further his/her career as an Operational Technology Network Engineer.

Position Summary: Provide consultation, design, implementation and troubleshooting of industrial network and ICS cybersecurity solutions. Provide direction and coordination of OT/ICS Cybersecurity solutions for industrial projects in the food and beverage industry throughout the United States and Caribbean.

Essential Responsibilities

• Conducts industrial network assessments and report findings through professionally written reports and presentation to clients.
• Works with clients to develop industrial data centers, ICS cybersecurity and industrial network solutions, including but not limited to, system architecture, Bill of Materials, industrial networks implementation planning, and endpoint security testing/planning/deployment.
• Design, configuration and deployment of industrial networks and industrial data centers for highly available environments including but not limited to NAS, SAN, Hypervisors, clusters, industrial network switches, firewalls and Windows or Linux servers.
• Design, configuration and deployment of Windows/Linux servers for infrastructure services i.e. Active Directory, DNS, SMTP Relay, WSUS, Certificate Services, etc.
• Design, configuration and deployment of SCADA software including but not limited to, SCADA software configuration, configuration for high availability, and integrations with databases, authentication servers, etc.
• Interface with IT teams to drive IT-OT integrations to completion.
• Develops project documentation including, but not limited to, network drawings, IP address lists, server lists, functional descriptions, user requirements, etc.
• Assist ICS Cybersecurity Engineers or Manager with the implementation of security controls and security monitoring included but not limited to security appliances and software, modification of network traffic flow, etc..
• Assist ICS Cybersecurity Engineers or Manager with the implementation of OT/ICS cybersecurity best practices including defense-in-depth principles, principle of least privilege, IEC-62443, NIST.SP.800-82 and other applicable standards or security principles.
• Performs strategic system maintenance, including but not limited to, patching and firmware upgrades in high availability OT infrastructure to minimize downtime.
• Performs detailed resolution writeups in ticketing systems like ZenDesk, ServiceNow, etc.
• Readily available to support clients and controls engineers with issues related to industrial networks, SCADA software and industrial data centers.
• Able to be resourceful to troubleshoot and resolve problems with SCADA software and Windows/Linux operating systems.
• Able to quickly spin up development systems for proof of concept/testing.
• Understands PLC/HMI, SCADA, VFD and instrumentation functions and assist clients and controls engineer with troubleshooting.
• Works with subcontractors (electrical and telecommunication contractors) on projects including oversight of installation related to network infrastructure.
• Stays current with the latest OT/ICS cybersecurity threats, technologies and solutions.
• Proactively assists the Cyber Team in developing best practices to streamline the deployment of industrial network solutions including maintaining internal documentation and lab deployments.
• Drafting of networks layouts, OT/ICS infrastructure layouts, etc.
• Ensures projects are completed on time and on budget.
• Manages OT/ICS infrastructure projects up to $250k.
• Interacts with and manages customer expectations.
• Other functions as required by the project or team.

Minimum Qualifications

• Cisco CCNA.
• 1 year experience working with virtualize environment utilizing VMware/Promox/Microsoft Hyper-V/Nutanix.
• 2 years of experience configuring enterprise and/or industrial networks.
• 3 years of controls engineering experience programming, integrating and commissioning PLC, HMI and SCADA systems.
• Bachelor’s degree in electrical engineering, mechanical engineering, chemical engineering, information technology or cybersecurity.
• Ability to multitask on multiple projects and project elements.
• Proficient with Microsoft Office Suite including Word, Excel, Outlook and Project.

Preferred Qualifications (some of the following)

• Engineer-in-Training certificate or Professional Engineer license.
• VMware VCP-CDV certificate.
• Very proficient with Microsoft Excel and Outlook as well as experience with Microsoft Project.
• Experience with AutoCAD and Microsoft Visio.
• Experience configuring, deploying and administering the following Rockwell Automation software packages: RSLogix5, RSLogix500, RSLogix5000, Studio5000, FactoryTalk View SE, FactoryTalk View ME, RSView32, FactoryTalk Batch, FactoryTalk Historian SE, FactoryTalk VantagePoint, PlantPAx, and FactoryTalk AssetCentre.
• Experience configuring, deploying and administering WonderWare System Platform components.
• Experience configuring, deploying and administering Ignition and/or Sepasoft.
• Experience troubleshooting the following networking protocols: EtherNet/IP, ControlNet, DeviceNet, Modbus RTU, Profibus PA, Profibus DP, Remote I/O (RIO), and Data Highway Plus (DH+).
• Experience configuring and deploying virtualization utilizing VMware ESXi, vCenter, Microsoft Hyper-V or Proxmox for manufacturing systems.
• Experience configuring, deploying and administering IT/OT Infrastructure, including Domain Controllers, SMTP Relay Servers, Backup Solutions, Certificate Services, etc.
• Experience conducting network vulnerability assessments in OT infrastructure.
• Experience configuring, deploying and administering Cisco/Dell/Fortinet network hardware configuration. Command Line Interface experience is most beneficial.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully preform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to sit for long periods of time; stand; walk; use hands to finger handle, or feel; reach with hand and arms; grasp and manipulate objects; and talk or hear. The employee may be required on occasion to climb stairs and/or ladders; kneel; stoop; crouch; and crawl. The employee must occasionally lift and/or move up to 50 pounds. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and ability to adjust focus.

Work Environment

The nature of this job requires both office time and on-site time at a customer facility. Work during office time takes place in a clean, pleasant and comfortable office setting. Work during on-site time employees could encounter cold, hot, humid, noisy conditions. This position will require a minimum of 25% travel time.

TM Process & Controls, Inc. is an Equal Opportunity Employer