Full Job Description
Position Location
This position is based in Portsmouth, VA.
Salary range- $110,000-$160,000/yr
Job Overview
The Industrial Control Systems (ICS) / SCADA/OT Network Engineer is the primary technical lead
responsible for operating a mission-critical, converged Operational Technology (OT) and Information Technology (IT) ecosystem supporting defense facility infrastructures, providing advanced network engineering support to ensure the high availability, optimal performance, and security of both enterprise IT and industrial OT/SCADA environments under NIWC purview. The scope spans complex network architecture, software/hardware integration, scripting/automation, cybersecurity engineering, Assessment and Authorization (A&A) support, and project collaboration. All work is stationery at the designated NIWC facility; no travel is authorized.
Responsibilities
Essential Job Duties:
• Provide advanced network engineering support to ensure the high availability, optimal performance, and security of both enterprise IT and industrial OT/SCADA environments
• Perform comprehensive engineering analysis to define optimal network topology, communication characteristics (ports, protocols, and services), and necessary components to establish local, metropolitan, and wide area networks (LAN/MAN/WAN). Implement network segmentation and Zero Trust Architecture (ZTA) principles to ensure strict access controls across the IT/OT boundary.
• Architect, design, implement, test, and support complex network architectures.
• Document precise rack elevations and logical/physical layouts of network infrastructures using Microsoft Visio.
• Analyze and specify network architecture configurations including registry, discovery, and connection to network-centric services. Prototype solutions for virtual private networks (VPNs), cryptographic tunneling, and the integration of Cross Domain Solutions (CDS).
• Install, configure, troubleshoot, and optimize physical and virtual network devices, including wired/wireless routers, firewalls, switches, and core network servers (DNS, Web, and proxy services).
• Configure nodes, subnets, domains, and comprehensive network security parameters. Set up and operate traffic generation software and hardware appliances to validate network performance.
• Configure and manage Cisco network appliances (e.g.,1200 series Threat Defense firewalls, ISE, various Catalyst and Nexus 9300 series switches) alongside Commercial Off-The-Shelf (COTS) security products (e.g., SolarWinds) and specialized hardware systems (e.g., Cisco HCI/C220 m7 with Nutanix).
• Apply expert working knowledge of Unix, Linux (*nix), and Windows operating systems to manage and maintain the infrastructure.
• Utilize high-level *nix scripting languages (AWK, SED, Perl, BSH, etc.) alongside PowerShell, Python, C/C++, Java, Packet C (Rave), and Ruby-on-Rails to automate network administration, parse logs, and optimize system components.
• Develop and execute standard operating procedures for the installation, operation, configuration, hardening, system maintenance, and troubleshooting of all project/system components.
• Install, configure, and maintain cybersecurity tools and appliances, including Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS).
• Participate in the creation, updates, and delivery of Assessment & Authorization (A&A) package deliverables to secure and maintain Authorizations to Operate (ATO).
• Participate in Information System (IS) risk assessments during the A&A process. Conduct, review, and assess the results of comprehensive security audits.
• Evaluate IT/OT systems, assess risk postures, analyze system security findings, recommend mitigation or remediation actions, and respond decisively to emerging threats.
• Identify alternative functional cybersecurity strategies to address critical security concerns and develop actionable implementation plans.
• Integrate information security requirements into the acquisition process. Develop security requirements for hardware, software, and service acquisitions specific to each supported project. Use applicable baseline security controls and ensure a robust software quality control process while identifying and establishing authoritative sources.
• Establish, maintain, and secure a complex, dedicated assessment and evaluation network environment.
• Develop and maintain instructions and procedures for data backup and disaster recovery.
• Create, maintain, and deliver technical correspondence, Requirements documentation, Standard Operating Procedures (SOPs), and other repeatable processes.
• Advise project leads and team members on the selection and application of technical analytic methods and tools.
• Proactively identify and address technical challenges associated with project assignments, collaborating directly with project leads and leadership.
• Attend and actively participate in Integrated Project Team (IPT) meetings, working groups, and sponsor/program briefings.
• Coordinate and collaborate effectively with other team members and sponsor/program participants. Communicate complex technical and programmatic concepts, information, or ideas in a confident, clear, and well-organized manner.
Key Responsibilities:
• Ability to work well with others.
• Ability to adhere to contract requirements.
• Ability to comply with company policies and procedures.
Job Requirements
Mandatory:
• Must be a US citizen
• Must have a Secret clearance or higher
• Effective oral and written communication skills
• 8 years of related experience
• Must meet IAT Level II requirements (e.g., CompTIA Security+ CE, CySA+, or CCNA Security).
• Minimum of 5+ years of production experience in systems administration, with 3+ years specifically in a DoD operational technology (OT), industrial SCADA, or utility control system environment to maintain administrative network privileges on Navy systems
• Bachelor's degree in computer science, Engineering, or a related technical field, paired with expert-level experience matching the systems, scripting languages, and hardware.
• Must have a valid driver's license with acceptable driving record upon request
• Must be able to successfully pass a pre-employment background check and pre-hire drug test.
Working Conditions:
• Travel will be required.
Physical Requirements:
• Must be able to carry IT equipment (• Must be able to climb on a ladder to check IT equipment mounted in ceiling.
