Zero Trust Architect

RESPONSIBILITIES: OpenKyber has a client that is seeking a Senior OT Network Engineer in Georgetown, NY.

Summary: Our client is seeking a hands-on Senior OT Network Engineer to join their System Solution team. This onsite role serves as the critical bridge between IT and plant engineering. The successful candidate will design and deploy secure, resilient industrial networks leveraging Cisco SD-Access and micro segmentation strategies to ensure zero unplanned downtime across manufacturing environments.

• OT Infrastructure Delivery: Lead the deployment, modernization, and day-to-day lifecycle management of OT network infrastructure
• Zero-Trust Network Design: Architect secure industrial networks incorporating IDMZ, macro-segmentation, and granular microsegmentation policies across Purdue Model layers
• SD-Access Implementation: Drive the adoption of Cisco SD-Access (SDA) within the OT environment to automate fabric deployment and enforce identity-based access control
• Operational & Escalation Support: Provide tier-3 troubleshooting for complex network incidents and coordinate major cutovers, upgrades, and maintenance windows
• Mentorship & Collaboration: Translate production requirements for IT and plant teams, while mentoring local IT support on OT network and security fundamentals

• Enterprise LAN/WAN and industrial OT network environments
• Cisco SD-Access (SDA) fabric architectures, DNA Center/Catalyst Center, and Cisco ISE
• Microsegmentation (identity-based policies, host-level security, or software-defined firewalls)
• VLANs, routing, switching, redundancy, and Next-Generation Firewalls (NGFW)
• Industrial wireless networks and high-availability design Plant-floor, automation, and edge systems utilizing industrial protocols (e.g., EtherNet/IP, Modbus)

• Bachelor's degree in a STEM field (or equivalent experience) with 10+ years of progressive network engineering experience
• OT Security Expertise: Proven track record securing manufacturing, industrial, or plant-floor networks using zero-trust frameworks, IDMZ, and segmentation
• Technical Skills: Strong hands-on experience troubleshooting complex routing, switching, and fabric-based network issues in high-availability environments
• Leadership & Communication: Exceptional interpersonal skills with a strong ownership mindset to guide cross-functional technical and non-technical stakeholders
• Preferred Credentials: Active certifications such as CCNP, CCIE, CISSP, or GICSP

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future. We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave. Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in OpenKyber's sole discretion unless and until paid and may be modified in its discretion consistent with the law. This job is not eligible for bonuses, incentives or commissions. OpenKyber is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from OpenKyber and its affiliates, and service providers. Note that if you choose to communicate with OpenKyber via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.

For applications and inquiries, contact:View email address on us.fitly.work