Zero Trust Architect

OpenKyber has a client that is seeking a Senior OT Network Engineer in Liberty, NC.

Summary: Our client is seeking a hands-on Senior OT Network Engineer to join their System Solution team. This onsite role serves as the critical bridge between IT and plant engineering. The successful candidate will design and deploy secure, resilient industrial networks leveraging Cisco SD-Access and micro segmentation strategies to ensure zero unplanned downtime across manufacturing environments.

• OT Infrastructure Delivery: Lead the deployment, modernization, and day-to-day lifecycle management of OT network infrastructure
• Zero-Trust Network Design: Architect secure industrial networks incorporating IDMZ, macro-segmentation, and granular microsegmentation policies across Purdue Model layers
• SD-Access Implementation: Drive the adoption of Cisco SD-Access (SDA) within the OT environment to automate fabric deployment and enforce identity-based access control
• Operational & Escalation Support: Provide tier-3 troubleshooting for complex network incidents and coordinate major cutovers, upgrades, and maintenance windows
• Mentorship & Collaboration: Translate production requirements for IT and plant teams, while mentoring local IT support on OT network and security fundamentals

• Enterprise LAN/WAN and industrial OT network environments
• Cisco SD-Access (SDA) fabric architectures, DNA Center/Catalyst Center, and Cisco ISE
• Microsegmentation (identity-based policies, host-level security, or software-defined firewalls)
• VLANs, routing, switching, redundancy, and Next-Generation Firewalls (NGFW)
• Industrial wireless networks and high-availability design
• Plant-floor, automation, and edge systems utilizing industrial protocols (e.g., EtherNet/IP, Modbus)

• Bachelor's degree in a STEM field (or equivalent experience) with 10+ years of progressive network engineering experience
• OT Security Expertise: Proven track record securing manufacturing, industrial, or plant-floor networks using zero-trust frameworks, IDMZ, and segmentation
• Technical Skills: Strong hands-on experience troubleshooting complex routing, switching, and fabric-based network issues in high-availability environments
• Leadership & Communication: Exceptional interpersonal skills with a strong ownership mindset to guide cross-functional technical and non-technical stakeholders
• Preferred Credentials: Active certifications such as CCNP, CCIE, CISSP, or GICSP

Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from OpenKyber and its affiliates, and service providers. Note that if you choose to communicate with OpenKyber via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.

For applications and inquiries, contact:View email address on us.fitly.work