> Markdown version of [/jobs/ext/2912460-operational-technology-network-enigneer-consultant](https://www.wearedevelopers.com/jobs/ext/2912460-operational-technology-network-enigneer-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Operational Technology Network Enigneer/Consultant - **Company:** Sword Group - **Location:** Glasgow, UK - **Salary:** £62,044.0 - **Contract:** Permanent contract - **Skills:** Complex Networks, Cyber Security, System Configuration, Network Address Translation, Domain Name System (DNS), Intrusion Detection Systems, Virtual Private Networks (VPN), Network Security, Network Architecture, Network Diagrams, Network Monitoring, Routing, Network Segmentation, Network Service, Packet Analyzer, Remote Access Technology, Zero Trust Network Access, TCP/IP, Virtual Local Area Networks, Software Vulnerability Management, Network Routers, Diagnostic Tools, Network Access Control, In-Plane Switching (IPS), System Availability, Firewalls (Computer Science), Palo Alto Networks, Fortinet, Firewall Services Module, Industrial Software, Cisco - **Published:** September 15, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5883539193 ## About the Role * Strong hands-on experience with enterprise and industrial networking. Strong experience configuring and managing next-generation firewalls. * Experience with platforms such as Palo Alto Networks, Fortinet, Cisco or Check Point. Strong understanding of firewall policies, NAT, VPNs, IPS/IDS and application-based security controls. * Experience designing and implementing OT network segmentation and industrial DMZs. Strong knowledge of VLANs, routing, switching, TCP/IP, DNS and network services. * Experience with Cisco switching and routing technologies. * Experience supporting secure remote access and privileged connectivity into OT environments. * Understanding of industrial protocols. Experience with network monitoring, packet analysis and troubleshooting tools. * Experience with high availability, redundant networking and resilient network architectures. * Knowledge of network access control, identity-based access and zero trust principles. * Experience with network testing, validation and acceptance activities. * Experience producing technical network and security documentation. * Experience within OT, industrial, energy, utilities or CNI environments would be highly desirable. * Knowledge of IEC 62443, Purdue Model, NCSC CAF, NIST or other OT security frameworks would be advantageous. ## Description * Design and implement secure OT network architectures. Configure and manage firewalls, switches, routers and secure remote access solutions. * Develop and implement network segmentation between IT, OT and safety-critical environments. * Support deployment of industrial DMZs, security zones and conduits. * Configure VLANs, routing, access controls and network security policies. * Support firewall policy design, rule reviews and optimisation. * Implement secure connectivity for OT applications, servers, engineering workstations and industrial systems. * Support network migrations, upgrades and infrastructure refresh programmes. Undertake network testing, validation and performance analysis. Support FAT, SAT, commissioning and production go-live activities. * Troubleshoot complex network, connectivity and firewall issues. * Support network hardening, vulnerability remediation and security improvement activities. * Produce HLDs, LLDs, network diagrams, firewall rule sets, test plans and as-built documentation. * Work alongside OT, cyber security, infrastructure, application and engineering teams. * Provide technical consultancy and guidance to customers on OT network security and resilience. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)