Sr. OT Network Engineer

Title Sr. OT Network Engineer ID 10000232 Department Information Technology Location: On-Site in Indian Head, MD Clearance: Must be a US Citizen with ability to obtain a Secret clearance Role Overview This role is responsible for the end-to-end design, implementation, and evolution of a secure, private, air-gapped OT network. The engineer will be the initial and sole network authority, owning technical decisions from assessment through deployment, with designs reviewed and certified by external stakeholders. Core Responsibilities Assess the existing network and industrial infrastructure Hardware reuse opportunities Upgradability and lifecycle risks Security and compliance gaps relative to DoD / Navy standards Security posture and compliance risk Operational reliability and uptime Cost, procurement lead time, and vendor supportability Design a private, air-gapped OT network architecture from the ground up VLAN and subnetting strategy aligned to industrial control boundaries Secure zoning between PLCs, HMIs, control rooms, and server rooms Isolation between multiple control/manufacturing groups with no lateral communication Architect and implement a private OT network that integrates with a newly deployed private 5G backbone Private 5G connectivity between control rooms, server rooms, and operational areas Fiber connectivity from manufacturing buildings to their associated control rooms Clear security boundaries between wireless, fiber, and core infrastructure Hands‑on implementation of all network infrastructure Racking, cabling, labeling, and power coordination Configuration of Cisco and Dell network equipment Firewall rules, routing, switching, and management plane access Enable secure OT data flows PLC → HMI communication within control rooms Controlled PLC/HMI data forwarding to centralized server infrastructure Protection of industrial systems from unintended access or broadcast traffic Produce and maintain authoritative network documentation to support compliance certification Logical and physical network diagrams IP address management and VLAN maps As‑built and as‑designed artifacts Clear security boundaries and documentation for RMF/STIG review Logging, segmentation, and access controls required for auditability Build the network as a scalable platform, not a one‑off deployment, ensuring Additional control/mfg groups can be added with minimal redesign Capacity, addressing, and segmentation can evolve over time Serve as the technical authority for network decisions, working with stakeholders to Explain trade‑offs and risks clearly Support procurement, installation, and acceptance activities Guide future expansion and modernization efforts Required Experience & Skills Minimum of 5 years experience as a hands‑on network engineer Strong hands‑on background with Enterprise switches and firewalls (Cisco and Dell preferred) Server configuration (Linux and Windows), Windows workstations Fiber and copper cabling in industrial environments VLANs, subnetting, routing, and network segmentation Experience working in air‑gapped or highly restricted environments Ability to operate independently and make sound technical decisions with minimal oversight Strong documentation and communication skills Minimum of Bachelor’s Degree from an accredited college or university in Computer Engineering, Computer Science, Cybersecurity, or a related discipline, or equivalent military experience Minimum of DOD 8140/DOD 8570 IASAE Level II Certification (or equivalent like CISSP or Security+) Strong attention to detail and organizational skills. Excellent communications skills. Preferred Experience & Skills Proven experience designing and implementing industrial / OT networks Familiarity with DoD / Navy cybersecurity expectations, including designing systems that can be certified (even if not performing certification directly) Understanding of PLC, HMI, and industrial data flows All employment opportunities are made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status or any other basis protected by law. #J-18808-Ljbffr Evans & Chambers