Experience managing a multi-site, global network (WAN/LAN/WLAN) supporting 24x7 manufacturing operations.
Certifications preferred: CCNP/CCIE or Fortinet NSE 4–7; ISA/IEC 62443 Cybersecurity Certificate/Expert or GIAC GICSP/GRID; CISSP; PMP or equivalent
QUALIFICATIONS
Network Leadership & Engineering
Expert knowledge of network and data communication protocols, dynamic routing (BGP, OSPF), switching, VLANs, QoS, and high-availability design.
Strong experience with SD-WAN and SASE architectures, carrier-managed WAN services, and next-generation firewalls (Fortinet FortiGate/SASE and Cisco/Meraki experience strongly preferred).
Working knowledge of enterprise wireless, VPN/ZTNA remote access, network access control, and network monitoring and observability tools.
Experience with unified communications and cloud voice platforms (Webex Calling, Microsoft Teams Voice) and video conferencing.
Operational Technology (OT) & Purdue Model – Required Expertise
Expert understanding of the Purdue Model, including the functions and trust boundaries of Level 0 (process), Level 1 (basic control/PLCs), Level 2 (supervisory/HMI/SCADA), Level 3 (site operations/historians/MES), Level 3.5 (IDMZ), and Levels 4–5 (enterprise).
Proven ability to design and implement zones and conduits per ISA/IEC 62443, including Security Level (SL) targets and IDMZ service brokering (jump hosts, patch/AV relay, historian replication, file transfer).
Working knowledge of industrial protocols and assets (e.g., EtherNet/IP, CIP, Modbus TCP, PROFINET, OPC UA/DA; PLCs, HMIs, SCADA, historians) and how they behave on the network.
Experience with OT asset discovery and passive OT threat monitoring platforms (e.g., Claroty, Nozomi Networks, Dragos, Microsoft Defender for IoT, Armis).
Understanding of safety-first, availability-driven OT priorities and consequence-based risk prioritization; ability to make network changes in production environments without disrupting operations.
Familiarity with secure remote access for OT (MFA, time-bound, monitored and logged vendor sessions) and controls commonly evaluated by cyber insurers and auditors.
Management & Professional Skills
Proven ability to lead, mentor, and develop technical staff; set priorities; and manage workload across projects and operations.
Strong project planning, budgeting, vendor management, and documentation skills.
Ability to communicate technical risk clearly to executives, plant leadership, engineers, and end users.
Cultural sensitivity; able to support a global user base which may include limited English or English as a second language.
Ability to work a flexible schedule, including after-hours change windows, on-call escalation, and domestic and international travel.
RESPONSIBILITIES
Network Team Leadership
Lead, manage, and develop the Network Team; set goals, assign work, conduct reviews, and build OT networking capability across the team.
Develop and communicate the scope, goals, deliverables, and milestones for all network and IT/OT projects.
Own the network budget, capital planning, and lifecycle/refresh roadmap; provide input to annual IT budget and prioritization.
Enterprise Network Operations
Own the design, operation, and performance of the global WAN, SD-WAN/SASE, LAN, wireless, firewall, VPN, and unified communications platforms to deliver secure, high-availability (99.9%+) services.
Monitor availability, performance, and capacity; drive root cause analysis and continuous improvement for network incidents.
Establish, promote, and enforce network standards, configuration baselines, change management, and documentation.
Lead network elements of site openings, acquisitions, integrations, and cutovers.
Manage carrier, managed service provider, and network vendor relationships, contracts, SLAs, and renewals in partnership with procurement.
OT Network & IT/OT Segmentation
Define and maintain the target-state IT/OT segmentation architecture and reference design based on the Purdue Model, NIST SP 800-82, and ISA/IEC 62443.
Design, build, and operate the Industrial DMZ and enforce controlled conduits between enterprise and plant networks; eliminate direct IT-to-OT traffic and dual-homed systems.
Lead plant network assessments, gap analyses, and a phased pilot-to-scale segmentation roadmap across manufacturing sites.
Maintain accurate OT network and asset inventories, network diagrams, and data-flow documentation for each plant.
Partner with Cyber Security to implement OT monitoring, secure remote access, logging to the SIEM/SOC, vulnerability management, and OT incident response playbooks and tabletop exercises.
Collaborate with plant engineering, maintenance, controls integrators, and equipment OEMs to plan maintenance windows and ensure network changes support safety and production continuity.
Resiliency & Security
Ensure continuous operations through resilient design and failover; validate and periodically test network recovery procedures, including OT recovery from ransomware scenarios.
Develop, implement, and maintain network security controls; validate controls and recommend process improvements.
Support internal and external audits, cyber insurance assessments, and due-diligence reviews related to network and OT security.
OTHER RESPONSIBILITIES
Recommend, develop, and support adherence to Corporate IT standards, policies, and procedures in accordance with best practices.
Lead and assist IT teammates on troubleshooting – problem identification, resolution, communications, and interfacing with IT and third parties.
Stay current on network, SASE, and OT security technologies, threats, and regulatory developments.
Perform other related job duties as requested by management.
Excellent benefits include medical with a standard PPO plan with deductibles as low as $1,500 and wellness credit up to $750; free concierge primary care; voluntary 401k plan currently matching up to 12%; voluntary dental and vision plans; free telemedicine services; basic life, long and short-term disability coverage.
EOE M/F/D/V
#IND11
