About The Role
Design and implement secure OT network architectures.
Configure and manage firewalls, switches, routers and secure remote access solutions.
Develop and implement network segmentation between IT, OT and safety-critical environments.
Support deployment of industrial DMZs, security zones and conduits.
Configure VLANs, routing, access controls and network security policies.
Support firewall policy design, rule reviews and optimisation.
Implement secure connectivity for OT applications, servers, engineering workstations and industrial systems.
Support network migrations, upgrades and infrastructure refresh programmes.
Undertake network testing, validation and performance analysis.
Support FAT, SAT, commissioning and production go-live activities.
Troubleshoot complex network, connectivity and firewall issues.
Support network hardening, vulnerability remediation and security improvement activities.
Produce HLDs, LLDs, network diagrams, firewall rule sets, test plans and as-built documentation.
Work alongside OT, cyber security, infrastructure, application and engineering teams.
Provide technical consultancy and guidance to customers on OT network security and resilience.
Requirements
Strong hands-on experience with enterprise and industrial networking.
Strong experience configuring and managing next-generation firewalls.
Experience with platforms such as Palo Alto Networks, Fortinet, Cisco or Check Point.
Strong understanding of firewall policies, NAT, VPNs, IPS/IDS and application-based security controls.
Experience designing and implementing OT network segmentation and industrial DMZs.
Strong knowledge of VLANs, routing, switching, TCP/IP, DNS and network services.
Experience with Cisco switching and routing technologies.
Experience supporting secure remote access and privileged connectivity into OT environments.
Understanding of industrial protocols.
Experience with network monitoring, packet analysis and troubleshooting tools.
Experience with high availability, redundant networking and resilient network architectures.
Knowledge of network access control, identity-based access and zero trust principles.
Experience with network testing, validation and acceptance activities.
Experience producing technical network and security documentation.
Experience within OT, industrial, energy, utilities or CNI environments would be highly desirable.
Knowledge of IEC 62443, Purdue Model, NCSC CAF, NIST or other OT security frameworks would be advantageous.