Basic FunctionThe OT Infrastructure Specialist supports fleet-wide Operational Technology (OT) infrastructure used to operate industrial control systems across HF Sinclair sites. This position provides technical administration, troubleshooting, lifecycle support, documentation, backup and recovery, patch implementation, and project support for OT servers, endpoints, virtualization, networks, firewalls, and industrial control system infrastructure. The role reports to the OT Infrastructure & Cybersecurity Lead and coordinates closely with the OT Cyber Analyst, regional support teams, site OT teams, IT, vendors, and site stakeholders.
Job Duties(functions considered essential as defined by ADA)
- Administer, maintain, and support Operational Technology (OT) infrastructure systems across fleet locations, including servers, virtualization platforms, network devices, industrial firewalls, endpoint platforms, backups, and supporting services.
- Provide advisory and hands-on technical support, as appropriate, for OT infrastructure associated with Honeywell Experion PKS/FTE, Foxboro ICS, Siemens ICS, and other Industrial Automation and Control Systems (IACS) environments, including centrally managed platforms, approved fleet standards, escalated site support, and infrastructure lifecycle activities.
- Assist with implementation, configuration, and lifecycle management of OT infrastructure standards, including system hardening, configuration baselines, patching, backup schedules, and disaster recovery procedures.
- Deployment, configuration, lifecycle management, administration, and ongoing support of centrally managed OT infrastructure platforms and fleet-wide support tools and applications used across supported OT environments.
- Coordinate with refinery operations, maintenance, reliability, OT, IT, vendors, and contractors to support safe and reliable OT system operation.
- Maintain and improve OT infrastructure asset records, network documentation, system diagrams, configuration records, backup records, and infrastructure support documentation. Support efforts to ensure centrally managed OT assets and support platforms are accurately documented, visible, and supportable through approved fleet tools and reporting processes.
- Perform or coordinate approved OT infrastructure maintenance activities in accordance with change management, management of change, and site operating procedures.
- Support the implementation of security updates, operating system patches, application patches, and firmware updates for OT systems where validated and approved by the business.
- Monitor OT infrastructure health, availability, capacity, and performance; troubleshoot hardware, operating system, virtualization, network, and communication issues.
- Support incident response activities by providing technical analysis, system recovery assistance, log collection, and infrastructure restoration support.
- Assist with vulnerability remediation and corrective action activities identified by the OT Cybersecurity Analyst, OT Cybersecurity Specialist, audit findings, or risk assessments.
- Participate in technical and non-technical projects requiring OT infrastructure support and cybersecurity oversight to ensure standards, policies, procedures, and site requirements are followed.
- Support vendor access coordination and vendor maintenance activities in accordance with company remote access, cybersecurity, and safety requirements.
- Provide fleet guidance and technical support for OT infrastructure reliability, availability, backup, patching, and lifecycle practices.
- Maintain familiarity with ISA/IEC 62443 concepts related to zones and conduits, asset management, system hardening, patch management, backup and recovery, and secure maintenance of IACS environments.
Special assignments or tasks assigned to the employee by their supervisor, as determined from time to time in their sole and complete discretion.
Experience- At least 4 to 7 years of related experience in OT infrastructure, industrial control systems, process control systems, network administration, systems administration, or a combination of equivalent experience.
- Experience supporting industrial control system environments, preferably Honeywell Experion PKS/FTE, Foxboro ICS, Siemens ICS, or similar distributed control system platforms.
- Knowledge of Windows Server, endpoint operating systems, virtualization, Active Directory integration, backup and restore methods, networking, firewalls, and industrial Ethernet communications.
- Experience supporting infrastructure in a refinery, pipeline, chemical, manufacturing, utility, or other industrial environment preferred.
- Working knowledge of cybersecurity concepts as applied to OT environments, including system hardening, least privilege, change control, remote access control, patch management, vulnerability remediation, and incident response support.
- Working knowledge of ISA/IEC 62443 principles preferred, especially as they relate to Industrial Automation and Control Systems (IACS), zones and conduits, secure system maintenance, and defense-in-depth.
- Experience coordinating work with operations, maintenance, engineering, IT, vendors, and site leadership.
- Ability to work calmly under pressure during system outages, abnormal operating conditions, or cybersecurity events.
- Possesses effective communication skills and the ability to explain technical issues to both technical and non-technical audiences.
- Acts with integrity, takes pride in work, demonstrates ownership, and seeks continuous improvement.
Education LevelA minimum of a bachelor's degree in computer science, information systems, engineering technology, industrial technology, cybersecurity, management information systems, or related fields is preferred. Equivalent OT infrastructure, control systems, military, technical, or industrial experience may be considered in lieu of degree requirements.
Required Skills- 4-7 years of related OT infrastructure, industrial networking, systems administration, or control systems support experience required.
- ISA/IEC 62443 Cybersecurity Fundamentals, CompTIA Security+, Network+, Server+, Microsoft, VMware, Cisco, Fortinet, Palo Alto, Honeywell, Foxboro, or Siemens certifications are a plus.
- Familiarity with Honeywell Experion PKS/FTE, Foxboro ICS, Siemens ICS environments, or similar control system infrastructure preferred.
- Knowledge of Windows Server, virtualization, endpoint administration, backups, networking, industrial firewalls, switches, and remote access technologies.
- Ability to support fleet-wide sites with up to 40% travel by land or air.
Supervisory/Managerial ResponsibilityRequires working closely with internal leadership teams, outside engineering firms, other companies, and in some case governmental agencies. No direct supervision is required: ability to lead cross functional teams is required.
Work ConditionsOffice based with up to 40% of travel by land or air is required. Subject to all weather and varying road conditions. Occasional long hours, as well as nights and weekends, may be required to support maintenance windows, outages, cybersecurity events, and site project activities.
BenefitsHF Sinclair offers a comprehensive benefits package designed to support the well-being of our employees and their families. Our benefits include, but are not limited to, the following:
- Medical Insurance
- Vision Insurance
- Dental Insurance
- Paid Time-Off
- 401(k) Retirement Plan with match
- Educational Reimbursement
- Parental Bonding Time
- Employee Discounts
We are committed to fostering a supportive and inclusive work environment, ensuring our employees have the resources needed to thrive professionally and personally.
Benefit eligibility is governed by official plan documents, for more details visit Total Rewards.
Physical RequirementsJob conditions require sitting, talking or hearing, making visual inspections, making precise hand and finger movements, perceiving color difference, and the ability to operate and drive assigned company vehicles at company standard insurance rates. A valid State driver's license and proof of insurance are required. Job conditions may require standing, walking, twisting, stooping, crouching, kneeling, reaching or grasping, lifting and/or carrying up to 25 lbs.
