Network Engineer, Industrial Protocols

Job description

About the role: The Network Engineer of Industrial Protocols brings a deep expertise in cybersecurity and industrial communication protocols to Divcon field operations. This role sits at the critical intersection of IT and OT (Operational Technology), ensuring the security, reliability, and performance of network infrastructure that supports industrial control systems, SCADA environments, building management systems, and mission-critical operations. The ideal candidate brings hands-on experience securing converged IT/OT networks, implementing defense-in-depth strategies for industrial environments, and working with protocols such as BACnet, Modbus, DNP3, OPC UA, and EtherNet/IP. You will play a key role in designing secure network architectures that protect critical infrastructure while maintaining the real-time performance these systems demand. Key Responsibilities: Design, implement, and maintain secure network architectures for converged IT/OT environments, including segmentation, firewalling, and zero-trust strategies. Configure and manage network infrastructure including switches, routers, firewalls, VPNs, and intrusion detection/prevention systems (IDS/IPS). Develop and enforce cybersecurity policies aligned with IEC 62443, NIST Cybersecurity Framework, and CIS Controls for industrial environments. Perform network vulnerability assessments, penetration testing, and risk analysis specific to industrial control system (ICS) and SCADA networks. Monitor network traffic for anomalous behavior using SIEM tools and OT-specific threat detection platforms. Implement and maintain secure communication channels for industrial protocols (BACnet/IP, Modbus TCP, DNP3, OPC UA, MQTT, EtherNet/IP). Collaborate with controls engineers, facilities teams, and third-party integrators to ensure secure system deployments and commissioning. Lead incident response efforts for network security events affecting industrial systems, including forensic analysis and remediation. Document network topologies, security procedures, and standard operating procedures (SOPs) for IT/OT infrastructure. Stay current on emerging cyber threats targeting industrial environments and critical infrastructure sectors. Qualifications: Education: Bachelor’s degree in Computer Science, Network Engineering, Cybersecurity, or a related technical field (or equivalent experience). Experience: 5+ years in network engineering with at least 3 years focused on cybersecurity in industrial or OT environments. Strong working knowledge of industrial protocols: BACnet, Modbus (RTU/TCP), DNP3, OPC UA, MQTT, EtherNet/IP, PROFINET. Hands-on experience with network security tools: firewalls (Palo Alto, Fortinet, Cisco ASA), IDS/IPS, NAC, SIEM platforms. Deep understanding of the Purdue Model / ISA-95 reference architecture for industrial network segmentation. Experience implementing IEC 62443 security standards in operational technology environments. Proficiency with network monitoring and analysis tools (Wireshark, Nmap, NetFlow/sFlow, Zeek/Bro). Solid foundation in TCP/IP, VLANs, routing protocols (OSPF, BGP), VPN technologies, and 802.1X. Preferred Qualifications Industry certifications such as CISSP, GICSP (Global Industrial Cyber Security Professional), CCNP Security, CEH, or CompTIA CASP+. Experience with SCADA systems, building management systems (BMS), or energy management platforms. Familiarity with cloud-based OT monitoring solutions and secure remote access architectures. Knowledge of NERC CIP, NIST SP 800-82, or other critical infrastructure protection frameworks. Experience with network automation and scripting (Python, Ansible, Terraform). Background in data center infrastructure, electrical power monitoring systems (EPMS), or mission-critical facilities. Familiarity with Ignition SCADA platform or similar industrial software environments. Physical Requirements: Requires frequent travel to job sites as needed, up to 75% with an average of 50% Ability to stand, walk, and move throughout job sites for extended periods Ability to climb ladders, stairs and lifts as required Ability to bend, kneel, crouch, and work in tight or confined spaces Ability to lift, carry, and maneuver equipment and materials up to 50 pounds Manual dexterity to handle tools, wiring, and small components Ability to work at heights and in varying indoor and outdoor conditions Visual keenness to read schematics, labels, and digital displays Ability to hear and respond to alarms, equipment sounds, and verbal instructions Capability to safely operate hand and power tools Benefits & Total Rewards: Opportunities for Growth Hands-on training and career advancement in an exploding data-center industry. Medical, Dental, and Vision Insurance We cover 100% of individual medical premiums and help offset the cost of family coverage. 401K with Employer Match Eligible after 90 days, with company matching to help you invest in your future. Disability Coverage Both short- and long-term disability insurance provided at no cost to our employees. Flexible PTO Take time off when you need it, no accruing time necessary. Field-Based Employee Benefits For eligible field-based roles that require travel, Divcon covers all business travel expenses and provides a per diem, phone allowance, tools, and PPE at no cost. Eligible employees also receive paid training and additional reimbursable business expenses. Divcon does not accept unsolicited resumes from agencies. Agencies must have a signed agreement in place prior to submitting any candidate. Unsolicited resumes will be considered the property of Divcon, and no fees will be paid. About Us: Headquartered in Dallas, Texas, Divcon delivers fully integrated automation solutions nationwide that optimize performance, energy efficiency, and reliability across HVAC, lighting, power monitoring, and mission-critical systems. Leveraging advanced technologies - including Allen-Bradley PLCs, Ignition SCADA, and Delta DDC systems - we combine deep technical expertise with field-tested execution to deliver precise, scalable, and high-performance solutions.