CIP Compliance Network Engineer

NRG • Princeton, NJ

10d • Hybrid

About The Position

The Critical Infrastructure Protection (CIP) Network Analyst has responsibility for maintenance, security, and CIP compliance of network equipment at the enterprise level. Scope includes network segmentation and VPN design, executing CIP compliance activities such as patch assessments on network equipment, change control, disaster recovery testing, cyber vulnerability assessments, and logical segmentation analysis.

Requirements

• 2 years of experience operating and maintaining next generation firewalls. (Fortinet preferred)
• 5 years of experience in implementation and administration of LAN/WAN/Internet networks and services.
• Working knowledge of cybersecurity and security tools
• Demonstrated ability to communicate (verbal and written) with all levels of internal and external customers.
• Demonstrated project management skills.
• Demonstrated ability to work independently and as a team member.
• Demonstrated ability to set priorities and to respond to changing demands from multiple sources.
• Ability to exercise discretion and independent judgment in applying established techniques, procedures, or standards.
• Demonstrated analytical and problem-solving skills.
• Ability to work in power plant, data center, or office environment as needed.
• Experience maintaining servers.
• Understanding of Citrix and VMWare

Nice To Haves

• Experience designing, securing, and maintaining networks using Fortinet Firewalls.
• Experience maintaining security applications such as intrusion prevention, antivirus, patch assessment, security incident and event management (SIEM)
• Experience in a NERC CIP Low program development and execution
• Experience with Routing, Switching, Datacenters, VPN, LAN, WAN, Wireless, Network Security, Intrusion Detection, and Anti-Virus.
• Power industry or other industrial experience in an IT/OT environment.
• Experience working with Ovation, T3000, Symphony +, or GE Control Systems
• Experience working with Nozomi, Dragos, Tenable OT, Darktrace, Claroty, or similar product.

Responsibilities

• Network design and implementation for secure networks relating to NERC CIP compliance and cyber security of the fleet.
• Network segmentation and protection to meet compliance goals.
• Working independently, perform and/or coordinate all site-specific activities, tests and controls for meeting program requirements and ongoing compliance of Fortinet network infrastructure.
• Utilize tools such as FortiManager, FortiAnalyzer, FortiSIEM to monitor and maintain the operation and security of the Fortinet infrastructure.
• Assist in preparation for various audits and act as subject matter expert (SME).
• Lead the maintenance of the CIP network policies and procedures such as change control procedures, back-up, and disaster recovery plans.
• Serve as SME on hardware, software, and control architectures for CIP.
• Utilize best practices and knowledge of internal/external issues to improve or recommend technical or compliance solutions.
• Monitor electronic perimeters for potential breaches/vulnerabilities and act as first responder for any potential incident.
• Provide input for detailed analysis, diagnosis and mitigation based upon findings and deficiencies for operational or compliance issues.
• Through cross training, provide backup activities and response for the CIP team.

Benefits

• Salary offered will be commensurate with the successful candidate’s education and/or experience and consistent with the job location’s market pay rate.
• NRG Energy is committed to a drug and alcohol-free workplace.
• To the extent permitted by law and any applicable collective bargaining agreement, employees are subject to periodic random drug testing, and post-accident and reasonable suspicion drug and alcohol testing.
• EOE AA M/F/Protected Veteran Status/Disability.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed