This position is not eligible for sponsorship. This is a hybrid role that requires being onsite multiple days at our corporate headquarters in Hartford, WI.Business Job Title: Unified Network Manager (IT/OT)Job Summary:The Unified Network Manager (IT/OT) is responsible for the design, implementation, management, and maintenance of secure IT/OT network infrastructures across multiple business units, sites, and operating companies. This role focuses on bridging Information Technology (IT) and Operational Technology (OT) environments while adhering to the
Purdue Model for Industrial Control Systems (ICS).
Using Fortinet and Cisco technologies, the Manager will implement and maintain Madison Air network standards, enforce a
Zero-Trust network architecture, oversee segmentation, manage patching, and ensure high availability for both corporate and production networks.
Job Responsibilities:- IT/OT Network Engineering & Architecture (Purdue Model)
- Design and deploy scalable, segmented, and secure networks following the OT Purdue Model (Levels 0-5), ensuring robust separation between corporate IT and manufacturing/production OT zones.
- Implement and manage OT DMZs to safely regulate traffic between IT and OT environments.
- Design and manage complex network architectures using Fortinet-based network architecture and approved multi-vendor switching and routing platforms while implementing Madison Air network standards.
- Configure VLANs, port control, static routing, and dynamic addressing (DHCP/IoT DHCP) tailored for both IT and industrial assets.
- Manage multi-organization implementation of Madison Air network standards, including Fortinet-based network architecture for FortiSwitch switching, FortiAP access points, FortiGate firewalls, MDF/IDF architecture, and large and medium campus network environments.
- Network Security & Zero-Trust Implementation
- Implement a Zero-Trust network architecture, including strict access controls, micro-segmentation, and continuous authentication for users and devices.
- Manage Fortinet firewall (FortiGate) policies, including IPSec/SSL VPNs, SD-WAN, and Intrusion Prevention Systems (IPS) across on-premises and cloud (Azure) environments.
- Configure and maintain industrial wireless networks and access points with secure authentication.
- Maintenance, Patching & Upgrades
- Develop and execute patch management schedules for all network equipment (firewalls, switches, access points) to minimize downtime in OT environments.
- Perform routine firmware upgrades and hardware replacements to meet industry security standards and manufacturer support requirements.
- Utilize monitoring tools (e.g., FortiManager, FortiAnalyzer, Cisco Prime) for proactive health checks and incident response.
- Phone Systems, PBX Review & Microsoft Teams Telephony
- Manage enterprise phone systems, including call routing, carrier services, auto attendants, call queues, E911 coordination, operational support, vendor coordination, lifecycle planning, and alignment with Madison Air network and security standards.
- Lead migration planning and execution for phone systems moving to Microsoft Teams telephony, ensuring business continuity, user readiness, and proper cutover support.
- Review public PBX systems, carrier services, and related telephony infrastructure to identify risks, modernization opportunities, cost efficiencies, and compliance with enterprise standards.
- Manage OPEX budget planning, spend tracking, vendor renewals, and required business approvals for network, telephony, and related infrastructure expenditures.
- Network Operations, Governance & Lifecycle Management
- Oversee network operations, monitoring, alerting, incident response, availability, and performance management across enterprise, campus, and OT network environments.
- Own lifecycle planning for network infrastructure, including standards compliance, refresh planning, hardware replacement, supportability, warranty status, and end-of-life remediation.
- Ensure network changes follow formal change management processes, including risk assessment, implementation planning, rollback planning, business communication, and post-change validation.
- Perform capacity planning for WAN, LAN, wireless, firewall, and campus network services to support business growth, production requirements, and modernization initiatives.
- Manage WAN, SD-WAN, internet, VPN, and carrier connectivity services, including redundancy, resiliency, circuit performance, and vendor escalation.
- Implement and manage network access controls, including port security, device authentication, 802.1X/NAC where applicable, and role-based segmentation.
- Manage IP addressing, DNS, DHCP, subnet allocation, and IPAM processes across IT, OT, wireless, and campus environments.
- Maintain configuration standards, backup processes, version control, and recovery procedures for firewalls, switches, wireless controllers, and related network systems.
- Provide reporting on network availability, incidents, project progress, lifecycle risk, security posture, and budget performance.
- Lead network infrastructure projects from planning through implementation, including scope definition, timelines, resource coordination, stakeholder communication, testing, and operational handoff.
- Multi-Organization Support & Documentation
- Provide network support across multi-organization environments, ensuring Madison Air network standards and standard operating procedures are consistently implemented and maintained.
- Create and maintain detailed, up-to-date network diagrams, configuration documentation, and disaster recovery plans.
- Collaborate with automation engineers and IT teams to troubleshoot connectivity issues bridging IT and OT systems.
Job Requirements:- Education: Bachelor's degree in Computer Science, Information Technology, or relevant experience in IT/OT Networking.
- Experience: 7+ years of experience in network administration, with at least 2 years focused on OT/industrial environments.
- Networking Gear: Strong hands-on experience with Fortinet solutions (FortiGate, FortiSwitch, FortiAP) and approved multi-vendor switching and routing platforms.
- Enterprise Standards Implementation: Experience implementing Madison Air network standards across multi-organization environments, including Fortinet-based network architecture, FortiSwitch switching, FortiAP access points, FortiGate firewalls, MDF/IDF architecture, in large and medium campus network designs.
- OT/ICS Knowledge: Proven understanding of the Purdue Model for ICS security and ISA/IEC 62443 standards.
- Zero-Trust: Experience implementing Zero-Trust network principles.
- Certifications (Preferred): Fortinet NSE 4-7, Cisco CCNP/CCNA, GICSP (Global Industrial Cyber Security Professional).
- Telephony & Budget Management: Experience managing enterprise phone systems, Microsoft Teams telephony migrations, public PBX reviews, OPEX budgets, vendor spend, and business approval processes.
- Network Operations & Governance: Experience managing network operations, lifecycle planning, formal change management, capacity planning, WAN/SD-WAN services, network access controls, IPAM, configuration backups, vendor escalation, and operational reporting.
Key Competencies:- Security First: Deep understanding of modern cybersecurity threats to IT/OT environments.
- Multitasking: Ability to prioritize tasks across multi-organization environments.
- Technical Communication: Ability to bridge communication between IT staff and industrial floor operators.
- Leadership & Governance: Ability to lead standards adoption, prioritize operational work, coordinate stakeholders, and drive disciplined execution across multi-organization environments.
Physical Requirements:- Environment: Office/remote work with on-site visits to industrial manufacturing environments (occasional).
- Hours: Ability to work on weekends/off-hours for maintenance windows.
- Physical Ability: Ability to lift, move, and mount networking equipment such as switches, access points, firewalls, rack-mounted hardware, and related infrastructure as required.
- Equipment Access: Willingness to obtain and maintain scissor lift certification to safely access and support network infrastructure in manufacturing, warehouse, and campus environments.
At Broan NuTone, we take pride in offering exceptional benefit packages and a highly competitive pay structure to our employees. Our comprehensive benefits include health, dental and vision insurance, company paid life insurance, disability insurance, retirement plans, paid time off, wellness program, education assistance, parental leave, and employee assistance programs. In addition, we provide a competitive pay structure that rewards our employees for their hard work and dedication, ensuring that they are compensated fairly for their contributions. Join our team and enjoy the peace of mind and financial stability that comes with our outstanding benefits and competitive pay
#LI-JD1
#LI-Hybrid
