IT/OT Network Engineer

Wunderlich-Malec Engineering
Loveland, CO, United States
2 days ago
Apply on www.builtincolorado.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
3 years minimum
Compensation
$115,000 - $130,000
Working hours
Regular working hours

Tech stack

Active Directory Data Analysis Backup Devices Border Gateway Protocol Big Data Spanning Tree Protocols Software as a Service Configuration Management Cyber Security Network Address Translation Ethernet Enhanced Interior Gateway Routing Protocol
+27 more
Health Information Management Supervisory Control and Data Acquisition (SCADA) Hyper-V Virtual Private Networks (VPN) Python (Programming Language) Microsoft Visio Windows Servers Modbus Network Architecture Network Diagrams Routing Open Shortest Path First (OSPF) Windows PowerShell Remote Access Technology Ansible OPC Unified Architecture Security Information and Event Management TCP/IP Transmission Control Protocol (TCP) Virtual Local Area Networks Virtualization Technology Scripting Firewalls (Computer Science) Information Technology Fortinet Cisco Vmware

Job description

Wunderlich-Malec Engineering is seeking a Senior IT/OT Network Engineer to design, secure, and support the networks that connect enterprise IT systems with industrial control environments. You will serve as the bridge between traditional IT infrastructure and plant-floor OT systems, delivering resilient, secure network architectures for our clients in manufacturing, water/wastewater, energy, life sciences, and other process industries, while also supporting WME’s internal infrastructure. Location: Anywhere in US

This is a senior, hands-on role. You will lead network design on client projects, mentor junior engineers, and be the subject-matter expert for ICS network security, segmentation, and industrial protocols., * Design, implement, and document IT/OT network architectures including segmentation models (Purdue Model, zones and conduits per ISA/IEC 62443), industrial DMZs, and secure remote access.

  • Configure and support switching, routing, firewalls, VPNs, and wireless across both enterprise and industrial environments (Cisco, Cisco Industrial/IE series, Stratix, Hirschmann, Palo Alto, Fortinet, or similar).
  • Integrate PLCs, HMIs, SCADA, DCS, and historians onto properly segmented networks; troubleshoot industrial protocols such as EtherNet/IP, Modbus TCP, PROFINET, OPC UA, and DNP3.
  • Perform network assessments, vulnerability reviews, and gap analyses against ISA/IEC 62443, NIST 800-82, and client cybersecurity standards; recommend and implement remediation.
  • Deploy and tune OT visibility and monitoring tools (e.g., Claroty, Nozomi, Dragos, Cisco Cyber Vision) and integrate with enterprise SIEM/NAC.
  • Lead network portions of control system projects: requirements gathering, bill of materials, design drawings, FAT/SAT, commissioning, and cutover planning with minimal production impact.
  • Produce high-quality deliverables including network diagrams, IP schemas, configuration standards, and as-built documentation.
  • Support virtualization and server infrastructure for OT (VMware/Hyper-V, Windows Server, Active Directory, backup and DR) where it intersects with the network.
  • Provide tier-3 escalation support and participate in on-call or emergency response for critical client systems as needed.
  • Mentor engineers, review designs, and contribute to WME’s internal standards, templates, and best practices.
  • Interface directly with client IT, OT, and plant operations stakeholders; translate technical risk into business terms., Leads a team managing ADA and PWFA accommodation claims, ensuring accurate, timely, compliant claim adjudication and strong customer service. Responsibilities include coaching employees, managing performance and workloads, reviewing claim files and calls, identifying process improvements, administering concurrent disability and leave claims, mitigating risk, and communicating operational updates. The role requires disability or absence management expertise, sound judgment, knowledge of applicable regulations, and effective stakeholder collaboration.

Requirements

  • Bachelor’s degree in Computer Science, Electrical Engineering, Information Technology, or related field, or equivalent experience.
  • 7+ years of network engineering experience, with at least 3 years in industrial/OT environments (manufacturing, utilities, oil and gas, pharma, or similar).
  • Expert-level knowledge of TCP/IP, VLANs, routing protocols (OSPF, BGP, EIGRP), spanning tree, QoS, NAT, and firewall policy design.
  • Hands-on experience with industrial Ethernet, ring topologies (REP, DLR, MRP), and ruggedized/managed industrial switches.
  • Working knowledge of ISA/IEC 62443 and the Purdue reference architecture.
  • Experience with firewalls and secure remote access solutions in ICS environments.
  • Strong documentation skills and ability to produce engineering-grade drawings (Visio or similar).
  • Ability to travel to client sites, approximately [25-40%].
  • Must be a U.S. citizen or permanent resident; some projects may require background checks or site-specific clearances., * CCNP (Enterprise or Security), CCNA Industrial, PCNSE, NSE 4+, or equivalent.
  • GICSP, ISA/IEC 62443 Cybersecurity Expert, or CISSP.
  • Experience with Rockwell, Siemens, Emerson, or Honeywell control platforms.
  • Experience with OT asset discovery/monitoring platforms and SIEM integration.
  • Scripting/automation experience (Python, PowerShell, Ansible) for configuration management.
  • Prior work for a systems integrator or engineering consulting firm., Qualifications Behaviors Preferred Team Player: Works well as a member of a group Detail Oriented: Capable of carrying out a given task with all details necessary to get the task done well Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

Benefits & conditions

Be an Early Applicant Remote or Hybrid Hiring Remotely in United States 115K-130K Annually Senior level Remote or Hybrid Hiring Remotely in United States 115K-130K Annually Senior level Designs, administers, secures, and maintains WAN, LAN, WLAN, VLAN, VPN, VoIP, and firewall infrastructure across more than 50 North American locations. Responsibilities include network monitoring, troubleshooting, upgrades, audits, documentation, performance improvements, project management, information security support, escalation support, mentoring, and occasional branch-site travel. Provides onsite, remote, on-call, and emergency support while advancing shared IT services and network reliability. The summary above was generated by AI, *Job Descriptions are not exhaustive lists of all skills, responsibilities, or efforts associated with a job. They reflect principal job elements essential for performing the job and evaluating performance

Wunderlich-Malec is proud to offer a comprehensive employee-owner benefit package. Full-time employees may be eligible for the following benefits: Medical * Dental * Vision * Basic and Supplemental Life and AD&D * Long Term Disability * Voluntary Short Term Disability * Healthcare & Dependent Care Flexible Spending Accounts * Health Savings Account * Paid Time Off (PTO) * Paid Holidays * Tuition Reimbursement * Referral Bonus Program * 401(k)/Profit Sharing * 100% ESOP (Employee Stock Ownership Plan) * Employee Assistance Program * Will Preparation Resources * Worldwide Travel Assistance

The expected salary range is $115,000 - $130,000 per year depending on qualifications plus a discretionary bonus and employee stock program., In-Office or Remote 2 Locations Expert/Leader Expert/Leader Big Data * Information Technology * Software * Analytics * Energy Own enterprise sales and account growth for energy-focused SaaS solutions. Build executive relationships, generate qualified pipeline, lead consultative sales pursuits, align solutions with strategic business objectives, develop presentations and ROI cases, negotiate and close opportunities, manage renewals and upsells, and maintain accurate Salesforce and sales database records. Top Skills: Generative AiMicrosoft AccessExcelMS OfficeMicrosoft OutlookMicrosoft PowerpointMicrosoft WordSaaSSalesforce MetLife

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.builtincolorado.com
Prepare application

Good distractions

Loading talks and stories from around this role…