Sr. OT Systems Engineer

Position Summary
Acts as a technical expert for the Operations Technology (OT) engineering team who performs the engineering, configuration and deployment of the network and virtual server infrastructure that supports the organization's OT environment. Responsible for the security, reliability, and performance of the OT environment to ensure the safe and reliable delivery of natural gas. This position will utilize multidiscipline knowledge of and experience in network infrastructure (enterprise grade and industrial grade firewalls, switches, and routers), virtual server infrastructure, cyber security tools and technologies, identity access management systems, OT software applications, operating systems, wireless communications (private radio, spread spectrum, LTE), and OT devices (PLCs, RTUs). The ideal candidate would have extensive experience as a network engineer and virtualization engineer for the oil and gas industry. Must be available to serve on-call on a rotating 24 hours a day, 7 days a week schedule.

Tasks and Responsibilities
Engineers, deploys and maintains network and virtual server infrastructure for remote control and monitoring of natural gas pipeline facilities.
Performs system and equipment deployments and upgrades on network and virtual server infrastructure projects while ensuring no disruptions to the ability to control and monitor the natural gas pipeline.
Performs project management functions on network and virtual server infrastructure projects, including coordinating resources from different departments.
Assists in meeting compliance with TSA and public service commission (PSC) regulatory requirements.
Uses detailed understanding of OT device protocols (e.g. Modbus, DNP3) and the Purdue Model for ICS networks to architect, deploy and maintain securely segmented network infrastructure for communications between Critical Cyber Systems.
Collaborates with engineering and operations teams to identify requirements and specifications for external projects that require additions or changes to the OT environment.
Collaborates with engineering and operations teams to ensure internal projects do not interrupt critical pipeline operations.
Uses detailed understanding of the OT environment and operations requirements to troubleshoot and resolve OT application issues, computing and network equipment failures and communications outages within specified time limits.
Architects and deploys test environments for testing of software updates and patches.
Tests and deploys patches and software updates for all types of OT infrastructure including operating systems, network equipment, virtual infrastructure, and PLCs while ensuring no disruption of critical operations using a continuously evaluated risk-based methodology.
Deploys and manages identity access management systems for controlling access to network devices and other OT applications and systems.
Performs administration, configuration, installation, and deployment of network equipment including firewalls, routers, and switches.
Collaborates with vendors to identify and procure equipment and systems and to troubleshoot and resolve problems.
Specifies, procures, and manages installation of network and virtual infrastructure components.
Specifies, procures, and manages installation of physical communications media (e.g. fiber, CAT5/6) for inside plant and outside plant applications through conduit or raceways.
Develops and maintains firewall policies to meet CISA and TSA-SD2 guidelines and requirements.
Develops and maintains system documentation including run books, asset inventories, and network diagrams.
Serves as an OT subject matter expert for communications with internal and external stakeholders including TSA and PSC regulatory inspectors.
Evaluates equipment lifecycles and develops replacement schedules and cost estimates.
Evaluates and deploys new technologies to continuously improve the security and reliability of the OT environment.
Uses in-depth knowledge of operational requirements, communication infrastructure and information systems to discover and evaluate risks due to system vulnerabilities and implement mitigation measures within the OT environment.
Develops and maintains cyber policies and procedures to meet compliance with TSA and PSC cybersecurity requirements.
Performs risk assessments and penetration tests within the OT environment.
Collaborates with internal supply chain teams to ensure vendor agreements meet TSA and PSC cybersecurity requirements.

Qualifications, Skills and Abilities
Bachelor's Degree Electrical Engineering, Computer Science, Information Systems or related field required
5+ Years with enterprise and industrial grade network infrastructure is required required
1+ Years of experience with server virtualization is preferred.
Demonstrated experience working on systems within an ICS/OT environment required.
Strong knowledge of networking concepts such as VLANs, network segmentation, and routing required.
Demonstrated experience troubleshooting networks at all layers of the OSI model required.
Strong knowledge of the Purdue Model for ICS networks preferred.
Demonstrated experience deploying and configuring network equipment including firewalls, switches and routers required.
Experience installing, deploying, and configuring virtual machines, hypervisors and bare metal servers is preferred.
Knowledge of process control, electronic, pneumatic and mechanical instrumentation systems preferred.
Experience working with federal and state regulatory agencies preferred.
Experience installing and programming PLCs/RTUs preferred.
Experience working with vulnerability and network scanning tools preferred.
Strong knowledge of network communications media including fiber and CAT5/6 required.
Ability to learn through instructor led training and self-study required.
Ability to write technical documentation required.
Ability to communicate fluently in written and verbal English required.