Senior IT/OT Network Engineer

Wunderlich-Malec Engineering is seeking a Senior IT/OT Network Engineer to design, secure, and support the networks that connect enterprise IT systems with industrial control environments. You will serve as the bridge between traditional IT infrastructure and plant-floor OT systems, delivering resilient, secure network architectures for our clients in manufacturing, water/wastewater, energy, life sciences, and other process industries, while also supporting WME’s internal infrastructure. **Location: Anywhere in US**

This is a senior, hands-on role. You will lead network design on client projects, mentor junior engineers, and be the subject-matter expert for ICS network security, segmentation, and industrial protocols.

Please note: This position is not eligible for H-1B employer-sponsored work authorization.

Key Responsibilities

• Design, implement, and document IT/OT network architectures including segmentation models (Purdue Model, zones and conduits per ISA/IEC 62443), industrial DMZs, and secure remote access.
• Configure and support switching, routing, firewalls, VPNs, and wireless across both enterprise and industrial environments (Cisco, Cisco Industrial/IE series, Stratix, Hirschmann, Palo Alto, Fortinet, or similar).
• Integrate PLCs, HMIs, SCADA, DCS, and historians onto properly segmented networks; troubleshoot industrial protocols such as EtherNet/IP, Modbus TCP, PROFINET, OPC UA, and DNP3.
• Perform network assessments, vulnerability reviews, and gap analyses against ISA/IEC 62443, NIST 800-82, and client cybersecurity standards; recommend and implement remediation.
• Deploy and tune OT visibility and monitoring tools (e.g., Claroty, Nozomi, Dragos, Cisco Cyber Vision) and integrate with enterprise SIEM/NAC.
• Lead network portions of control system projects: requirements gathering, bill of materials, design drawings, FAT/SAT, commissioning, and cutover planning with minimal production impact.
• Produce high-quality deliverables including network diagrams, IP schemas, configuration standards, and as-built documentation.
• Support virtualization and server infrastructure for OT (VMware/Hyper-V, Windows Server, Active Directory, backup and DR) where it intersects with the network.
• Provide tier-3 escalation support and participate in on-call or emergency response for critical client systems as needed.
• Mentor engineers, review designs, and contribute to WME’s internal standards, templates, and best practices.
• Interface directly with client IT, OT, and plant operations stakeholders; translate technical risk into business terms.

Required Qualifications

• Bachelor’s degree in Computer Science, Electrical Engineering, Information Technology, or related field, or equivalent experience.
• 7+ years of network engineering experience, with at least 3 years in industrial/OT environments (manufacturing, utilities, oil and gas, pharma, or similar).
• Expert-level knowledge of TCP/IP, VLANs, routing protocols (OSPF, BGP, EIGRP), spanning tree, QoS, NAT, and firewall policy design.
• Hands-on experience with industrial Ethernet, ring topologies (REP, DLR, MRP), and ruggedized/managed industrial switches.
• Working knowledge of ISA/IEC 62443 and the Purdue reference architecture.
• Experience with firewalls and secure remote access solutions in ICS environments.
• Strong documentation skills and ability to produce engineering-grade drawings (Visio or similar).
• Ability to travel to client sites, approximately [25–40%].
• Must be a U.S. citizen or permanent resident; some projects may require background checks or site-specific clearances.

Preferred Qualifications

• CCNP (Enterprise or Security), CCNA Industrial, PCNSE, NSE 4+, or equivalent.
• GICSP, ISA/IEC 62443 Cybersecurity Expert, or CISSP.
• Experience with Rockwell, Siemens, Emerson, or Honeywell control platforms.
• Experience with OT asset discovery/monitoring platforms and SIEM integration.
• Scripting/automation experience (Python, PowerShell, Ansible) for configuration management.
• Prior work for a systems integrator or engineering consulting firm.

*Job Descriptions are not exhaustive lists of all skills, responsibilities, or efforts associated with a job. They reflect principal job elements essential for performing the job and evaluating performance

Wunderlich-Malec is proud to offer a comprehensive employee-owner benefit package. Full-time employees may be eligible for the following benefits: Medical • Dental • Vision • Basic and Supplemental Life and AD&D • Long Term Disability • Voluntary Short Term Disability • Healthcare & Dependent Care Flexible Spending Accounts • Health Savings Account • Paid Time Off (PTO) • Paid Holidays • Tuition Reimbursement • Referral Bonus Program • 401(k)/Profit Sharing • 100% ESOP (Employee Stock Ownership Plan) • Employee Assistance Program • Will Preparation Resources • Worldwide Travel Assistance

The expected salary range is $115,000 - $130,000 per year depending on qualifications plus a discretionary bonus and employee stock program.