> Markdown version of [/jobs/ext/2557581-ot-network-security-engineer](https://www.wearedevelopers.com/jobs/ext/2557581-ot-network-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # OT Network & Security Engineer - **Company:** Vulcan Inc - **Location:** Benson, NC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Access Network, Software System Penetration Testing, Ethernet, Network Security, Network Architecture, Network Planning and Design, Routing, Remote Access Technology, Information Technology, Routing & Switching, Firewall Services Module - **Published:** August 10, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=f06396689b5c7372 ## About the Role * Bachelor's or Master's degree in Engineering, Computer Science, or a related field with 7+ years spanning industrial networking and OT security, or equivalent demonstrated depth in both - genuine capability on each side, not one with awareness of the other. * Ability to design and defend segmentation, switching, routing, and firewall policy for industrial Ethernet environments, and to reason about control-traffic behavior (EtherNet/IP or comparable) when making design trade-offs. * Ability to apply zone/conduit thinking and risk-based security levels to a real plant - asset inventory, monitoring, secure remote access, and patch/compensating-control judgment under production constraints. * Ability to take a network design through construction: fiber topologies, IDF and enclosure planning, and working productively with construction and cabling contractors. * Ability to write requirements vendors can build to and auditors can verify, and to defend security decisions to both operations and compliance audiences. Must be a U.S. Person due to required access to U.S. export-controlled information or facilities. Preferred Skills * Formal IEC 62443 project experience (zone/conduit registers, security-level assessments) or NERC CIP program work that translates directly to it. * Greenfield or major-expansion industrial network design, including construction-phase coordination. * Field or professional-services background with an OT security platform or consultancy (Claroty, Dragos, Nozomi class, or an OT security practice). * Defense industrial base, government-partnered, or otherwise compliance-driven manufacturing environments (CMMC, NIST 800-171/82). * Experience selecting or managing a managed OT detection-and-response service. * GICSP, ISA/IEC 62443 certificates, CISSP, CCNP, or equivalent credentials. * Industrial wireless design and site RF survey experience. * Familiarity with Rockwell/EtherNet/IP-centric plant architectures and industrial DMZ patterns. * Experience in regulated industries such as Defense, Aerospace, or Automotive. Physical and Environmental Requirements The position requires regular presence on the production floor and the ability to navigate all areas of the facility. Candidates must be able to climb stairs, stand and walk for extended periods, and work in environments that may be hot, humid, or noisy. The role also requires the use of personal protective equipment, including respirators, and adherence to all applicable safety policies, procedures, and regulatory requirements. Employees must be able to complete required fit testing, wear appropriate PPE for the duration of assigned tasks, and respond safely to changing conditions within the production environment. ## Description * Produce the OT network architecture for a large-format industrial facility: MDF/IDF distribution, fiber backbone topology, switching and routing design, IP schema, and resilience strategy. * Freeze IDF locations, pathways, and enclosure requirements into construction drawings on the construction schedule's * Author and maintain the IEC 62443 zone-and-conduit register, the living document that is the firewall policy. Set security-level targets per zone. * Write network and security requirements into all equipment packages ahead of Factory Acceptance Tests, and verify them at acceptance alongside Controls Engineers. * Design and operate the remote access architecture for internal OT network access and OEM support connectivity, with per-vendor approval and session control. * Coordinate the enterprise boundary with IT: DMZ services, WAN demarcation, identity architecture, and CMMC/CUI compliance evidence for the U.S. government partnership. * Select and onboard the managed OT detection-and-response provider ahead of first energization; scope the independent IEC 62443 risk assessment and penetration test; own patch-versus-compensating-control decisions with the area controls engineers. Deliverables You Will Develop, Review, or Support * OT network design basis, MDF/IDF standards, IP schema, and fiber/cabling specifications with acceptance criteria. * Zone-and-conduit register, security-level targets, firewall policy set, and the secure remote access design. * OEM network/security requirement specifications, FAT verification records, CMMC/CUI evidence packages, and the OT incident-response plan. * Switch and firewall configuration standards under change control, asset inventory, and the managed detection and service integration. Responsibilities and tasks outlined are not exhaustive and may change as determined by the needs of the business. ## Related Videos - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [The Gashlycrumb Tinies of AI Networking You Must Know (or Languish!)](https://www.wearedevelopers.com/videos/2067-the-gashlycrumb-tinies-of-ai-networking-you-must-know-or-languish) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)