IT Infrastructure Engineer

The IT Infrastructure Engineer oversees and secures the enterprise IT networks and field Operational Technology (OT) infrastructure powering pipeline operations. This role is instrumental in ensuring continuous high availability, optimizing remote telemetry communications, strengthening Industrial Control System (ICS) security baselines, and deploying scalable network architectures and compliance frameworks. This position reports directly to the Technology Manager.

Responsibilities:

• Maintain, optimize, and troubleshoot enterprise and field data communications, including cellular, satellite, radio telemetry, SIM management, and static IP assignments across distributed assets.
• Develop, implement, and enforce IT and OT cybersecurity standards, baseline policies, and operational procedures to safeguard critical infrastructure.
• Integrate cybersecurity architecture and security controls into operational capital projects and infrastructure expansions.
• Configure, manage, and routinely audit firewalls to maintain strict network segmentation between IT and OT environments (e.g., Purdue Model / IEC 62443).
• Conduct cybersecurity risk assessments and audits, implementing security controls aligned with industry standards (e.g., NIST SP 800-82, API 1164, ISA/IEC 62443).
• Support and secure industrial automation protocols (Modbus, DNP3, OPC, MQTT, and proprietary drivers) to ensure high availability and data integrity between field PLCs/RTUs, SCADA/DCS systems, and corporate enterprise applications.
• Continuously monitor enterprise and OT network traffic for performance degradation, protocol anomalies, potential security breaches, and unauthorized access attempts.
• Serve as primary contact for IT/OT cybersecurity incidents, performing rapid containment, root-cause analysis, and threat remediation.
• Lead efforts to evaluate and deploy emerging cybersecurity and networking technologies, ensuring alignment with regulatory and industry requirements.
• Works Monday–Friday schedule with extended hours and an on-call rotation (nights, weekends, and holidays) to support continuous 24/7 operations.
• Conduct onsite visits to field and office locations across Texas and Louisiana up to 15% travel.

Requirements:

• Network & Infrastructure (5+ years of experience)
• Routing, Switching & VPNs: Advanced proficiency in TCP/IP, DNS, DHCP, ARP, BGP, OSPF, and MPLS. Strong experience designing and deploying LAN, WAN, VLAN, and secure site-to-site VPN configurations.
• Hardware & Security Stack: Hands-on experience with routers, switches, firewalls, IDS/IPS, NAC, and load balancers.
• Wireless Technologies: Knowledge of enterprise wireless networking, industrial radio/cellular communications, access point deployment, and wireless security protocols.
• Monitoring & Automation
• Network Diagnostics: Expertise in network monitoring and packet analysis tools for real-time troubleshooting.
• Automation & Scripting: Experience using Python, Bash, or infrastructure-as-code tools (Ansible, Puppet, Terraform) for network automation.
• Preferred
• Operational Technology (OT) & Compliance (3-5 years of experience)
• ICS/SCADA: Demonstrated experience setting up and securing OT environments (DCS, ICS, PLCs, field automation).
• Regulatory & Industry Standards: Working knowledge of pipeline and industrial control standards, including DOT, API, and ISA (e.g., ISA/IEC 62443).
• Certifications
• CompTIA Network+
• Cisco Certified Network Associate (CCNA)
• Certified Information Systems Security Professional (CISSP) or equivalent industrial cybersecurity credential (e.g., GICSP)