Job Description
Network Engineer / Network Architect (OT / ICS - DOE Energy Sector)
What You'll Do
Design the OT Networks That Power Critical Operations
• Architect secure, segmented OT/ICS networks using the Purdue Model (Levels 0-3)
• Develop high-availability, deterministic designs supporting SCADA, PLCs, DCS, historians, and real-time automation
• Implement secure vendor/remote access pathways aligned to cybersecurity frameworks
• Build zoning, conduits, DMZs, and trusted data-flow architectures for mission operations
• Design and support industrial protocol environments (Modbus, DNP3, EtherNet/IP, OPC-UA, Profinet, IEC 61850, BACnet)
Engineer, Deploy, and Operate OT Infrastructure
• Configure and maintain industrial-grade switches, routers, firewalls, and ruggedized hardware
• Support facility systems such as building automation, utilities, power systems, and nuclear/experimental equipment
• Maintain diagrams, inventories, IP schemas, and documentation aligned with cybersecurity and configuration controls
Advance OT Cybersecurity & DOE Compliance
• Apply NIST 800-82, NIST 800-53/171, and ISA/IEC 62443 security controls
• Support DOE readiness activities, audits, and assessment documentation
• Collaborate with Cybersecurity teams on firewall policies, monitoring, logging, and threat detection
• Support vulnerability management while maintaining operational uptime in sensitive environments
Automate, Monitor & Sustain Critical Systems
• Build automation workflows (Ansible/Python) where safe and appropriate
• Integrate network health and security telemetry using approved OT monitoring platforms (Nozomi, Claroty, Splunk, SolarWinds, ELK/Grafana)
• Develop crisp documentation, change-control packages, and incident response materials
What You Bring
Required:
• 5-10+ years in network engineering/architecture, including 3+ years supporting OT/ICS in critical infrastructure
• Experience with:
- SCADA, historians, PLC/DCS systems
- Industrial protocols such as Modbus, DNP3, EtherNet/IP, OPC-UA, Profinet
- NIST 800-82, NIST 800-53/171, and related frameworks
- Industrial network gear (Cisco IE/Stratix, Hirschmann, Moxa)
- OT firewall/DMZ architecture (Palo Alto, Fortinet, ASA)
• Experience in energy, utilities, nuclear, national labs, or similarly high-security sectors
• Strong collaboration with Controls, Facilities, Cybersecurity, and mission support partners
Preferred:
• Certifications such as CCNP/CCIE, GICSP, ISA/IEC 62443, CISSP, PCNSE
• Experience with OT cybersecurity platforms (Nozomi, Claroty, Dragos)
• Background supporting DOE or other highly regulated environments
• Familiarity with cyber audits, readiness reviews, and facility safety/security protocols
Work Environment
• On-site role supporting plant-floor and mission-critical operations
• Occasional 24/7 on-call participation
• Travel to facilities, secured areas, or plant locations as needed
• PPE and safety training required
• Must be eligible for Q or L clearance
Success in This Role Looks Like
• More resilient, visible, and secure OT network operations
• Successful execution of Purdue Model and 62443-aligned segmentation
• Clear, consistent configuration-managed network baselines
• Reduced OT network incidents and stronger facility support
• Strengthened cybersecurity posture across mission-critical systems
Pay
Estimated Starting Base Salary Range: $67,564 - $135,128 This position is Bonus eligible. Centrus considers several factors when extending job offers, including but not limited to candidates' key skills, relevant work experience, and education/training/certifications. While the posted range reflects the anticipated hiring range for this position, compensation above the range may be considered for candidates with exceptional qualifications and directly relevant experience.
