Network Solutions Architect

We are seeking a hands-on Network Solutions Architect specializing in Industrial Operational Technology (OT) and enterprise-grade Cisco networking. In this role, you will design, secure, and deploy industrial network architectures across plant floors, manufacturing environments, and critical infrastructure. You will serve as the bridge between Information Technology (IT) and Operational Technology (OT), ensuring seamless, secure connectivity between plant-floor control systems (PLCs, SCADA, DCS) and corporate enterprise networks., * Industrial Network Design: Architect, test, and deploy resilient, low-latency OT networks using the Purdue Model for Industrial Control System (ICS) security.

• Cisco Ecosystem Integration: Design, configure, and troubleshoot Cisco industrial networking equipment, including Cisco Catalyst IE (Industrial Ethernet) switches, Industrial Integrated Services Routers (ISRs), Cisco Cyber Vision, and Cisco ISE.
• IT/OT Convergence: Partner with plant automation engineers, and enterprise IT to bridge network operations while maintaining strict segmentation.
• Plant Deployments: Conduct on-site network assessments, wireless site surveys, and hardware deployments across manufacturing facilities and processing plants.
• Cybersecurity & Segmentation: Implement firewalls (Cisco Secure Firewall/ASA, Fortinet, or Palo Alto), micro-segmentation, zero-trust access, and NAT rules to isolate critical manufacturing zones.
• High Availability & Protocols: Design redundant topologies (REP, PROFINET, EtherNet/IP, Modbus, STP/RSTP) ensuring zero zero-downtime tolerance on active production lines.
• Troubleshooting & Support: Act as the Tier 3/4 escalation point for complex plant network outages, packet captures, and routing/switching anomalies.

• Experience: 7+ years in network engineering/architecture, with at least 3+ years directly in manufacturing, plant, or OT environments.
• Cisco Expertise: Expert-level knowledge of Cisco IOS/IOS-XE, BGP, OSPF, EIGRP, VLANs, VXLAN, and Spanning Tree Protocols. Hands-on experience with Cisco Industrial Ethernet (IE) hardware.
• OT Protocols & Standards: Solid understanding of ISA/IEC 62443 security standards, the Purdue Model, and industrial communications (EtherNet/IP, PROFINET, Modbus TCP).
• Security & Firewalls: Proven experience implementing network segmentation, Industrial Security Firewalls, VPNs, and Access Control Lists (ACLs).
• Travel: Willingness to travel to manufacturing plants (20% - 40% as needed for site surveys and go-lives).

Preferred / Nice-to-Have

• Certifications: CCIE, CCNP Enterprise, Cisco Certified CyberOps, GICSP (Global Industrial Cybersecurity Professional), or ISA/IEC 62443 Specialist.
• Industrial Wireless: Experience with Cisco Ultra-Reliable Wireless Backhaul (CURWB) or industrial Wi-Fi deployment in high-interference environments.
• Monitoring Tools: Exposure to Cisco Cyber Vision, Claroty, Nozomi Networks, or Dragos for OT threat detection and asset discovery.