Network Security Engineer

Job Role: Contract Network Security Engineer Operational Technology (OT)
Location: Nationwide Travel (USA-based)
Contract Type: Full-Time Contract

Position Summary:
We are seeking experienced Network Security Engineers to join a specialized OT Security team led by the Client. This team will be responsible for enhancing cybersecurity across multiple Operational Technology (OT) sites throughout the United States. The role focuses on implementing robust security controls aligned with IEC 62443 and NIST standards for cyber-physical systems.
________________________________________
Key Responsibilities:
As part of the OT Security team, the Network Security Engineers will:
Travel to multiple OT sites across the U.S. to perform hands-on security implementations.
Implement and configure Cisco Firepower appliances (transparent and routed modes) to achieve OT network segmentation and system isolation.
Replace unmanaged OT switches identified during site walk-throughs with Meraki switches, and configure them for logical VLAN segmentation.
Configure and troubleshoot OT traffic flows to ensure secure and efficient communication across segmented networks.
Assist with rack-and-stack activities, supporting Client field services personnel during hardware deployment.
In some cases, assist with the replacement of Access Points (APs) as part of site upgrades.
Collaborate with site personnel and internal teams to ensure smooth deployment and minimal operational disruption.
Document configurations, site findings, and implementation details in technical reports.
Validate failover using SD-WAN and Cisco Firepower
________________________________________
Required Qualifications:
Strong hands-on experience with:
o Cisco Firepower appliances (transparent and routed modes)
o Meraki switches for VLAN segmentation
o VeloCloud SD-WAN integration
Familiarity with IEC 62443 and NIST Cybersecurity Framework for OT environments.
Experience in OT environments such as manufacturing, utilities, or critical infrastructure.
Ability to travel extensively across the U.S. (up to 90%).
Excellent troubleshooting, documentation, and communication skills.
Ability to work independently and as part of a distributed team.
________________________________________
Preferred Qualifications:
Relevant certifications: CISSP, GICSP, Cisco Security, or ISA/IEC 62443.
Experience with wireless infrastructure and AP deployments.
Familiarity with physical security controls in industrial environments.
________________________________________
Work Environment:
Field-based role with travel to industrial and operational sites.
May involve working in environments with heavy machinery, electrical systems, and other industrial hazards (appropriate safety training and PPE provided).