Engineer / Senior Engineer – OT Firewall & Network Security
Location: Remote Operations Center, Albany NY (Remote with 10-20% travel)
Employment Type: Full-time
About the Role: A leading renewable energy operator is seeking an OT Firewall Engineer to design, implement, and maintain secure network perimeters across wind, solar, and battery storage facilities. This role sits within the Remote Operations Centre and works closely with the Cybersecurity Manager and Compliance teams to ensure NERC CIP compliant OT network security across all sites and control centers.
Key Responsibilities:
- Design and implement OT network security controls including firewalls, VPNs, network segmentation, and WAFs for wind, solar, and BESS environments
- Administer Cisco (ASA/Firepower/FTD) and Check Point platforms including policy management, NAT, routing, and HA configurations
- Monitor and respond to security events using SIEM/SOAR, IDS/IPS, and packet analysis tools
- Own firewall-related NERC CIP controls (CIP-005, CIP-007, CIP-010) including configuration baselines, evidence collection, and audit support
- Manage vendor and contractor access for OT maintenance and commissioning activities
- Coordinate change windows with grid operations to ensure plant reliability and uptime
Requirements:
- Engineer: 5+ years administering enterprise firewalls and VPNs; NERC CIP familiarity
- Senior Engineer: 10+ years with deep Cisco and Check Point expertise; proven NERC CIP implementation in Medium Impact environments
- Experience with OT protocols (DNP3, Modbus, OPC) and SCADA/EMS environments
- Cisco CCNP Security or Check Point CCSA/CCSE certifications preferred
- Bachelor's degree in Computer Science, Electrical Engineering, Information Security, or equivalent
