OT Security Engineer/ Architect / Remote

Job Title : OT Security Engineer/ Architect / Remote

Location : Remote 

This role reports to the Chief Information Security Officer (CISO) and ETO Director and plays a critical part in ensuring secure, reliable, and high-performing transportation systems across Transportation Management Centers (TMCs), regional offices, and the main office.

Key Responsibilities

• Configure and troubleshoot VLANs, network segmentation, and routing protocols
• Monitor network performance and availability using network management tools
• Respond to network incidents including connectivity, performance, and security alerts
• Perform routine maintenance (firmware upgrades, backups, hardware support)
• Provide technical support for internal teams and external partners
• Configure and manage firewalls, IDS/IPS, and other security appliances
• Monitor and analyze SIEM alerts; escalate incidents as needed
• Support vulnerability scanning and remediation efforts
• Assist in enhancing cybersecurity incident response plans
• Document network configurations, procedures, and operational standards
• Prepare incident reports for authorities (e.g., FBI, NY State ITS)
• Collaborate with CISO and cybersecurity teams for compliance and security initiatives
• Support integration of ITS devices and applications

Minimum Qualifications

• Bachelor’s degree in IT, Computer Science, or related field (or equivalent experience)
• Strong knowledge of TCP/IP, routing, switching, and network security
• Hands-on experience with LANs, VLANs, trunking, STP, subnetting, routing protocols, and wireless
• Proven experience in network administration and troubleshooting
• Experience analyzing packet captures
• Firewall configuration (rules, NAT, threat protection, logging)
• Experience with IDS/IPS and SIEM tools
• Familiarity with network monitoring and vulnerability scanning tools
• Strong problem-solving and communication skills

Core Technical Understanding:

• Cloud: SaaS, IaaS, PaaS, Hybrid, On-Prem
• Cybersecurity: Defense in Depth, Least Privilege, CIA Triad
• Technologies: NAC, NGFW, VPN, IAM, micro-segmentation, encryption
• IT Concepts: High availability, failover, clustering, routing, tagging
• Systems: Virtualization, backups, imaging

Preferred Qualifications

• Certifications like CCNP, PCNSA, or similar
• Knowledge of NIST CSF, CIS Controls
• Experience with Operational Technology (OT) or critical infrastructure
• Experience in public sector or transportation networks
• Familiarity with incident response processes
• Understanding of data classification and enforcement
• Experience balancing security with system availability

Core Knowledge Areas

• TCP/IP networking, routing, switching, subnetting
• VLAN design and segmentation
• Network security (firewalls, IDS/IPS, access control)
• SIEM monitoring and incident escalation
• Network performance and availability management
• Threat intelligence and incident response
• Network documentation and topology design