CIP Compliance Network Engineer

NRG Energy•Peoria, IL

59d•Hybrid

About The Position

As an NRG employee, we encourage you to take charge of your career and development journey. We invite you to explore exciting opportunities across our businesses. You'll find that our dynamic work environment provides variety and challenge. Your growth is key to our ongoing success—take the lead in shaping your career development, goals and future! Job Summary: The Critical Infrastructure Protection (CIP) Network Analyst has responsibility for maintenance, security, and CIP compliance of network equipment at the enterprise level. Scope includes network segmentation and VPN design, executing CIP compliance activities such as patch assessments on network equipment, change control, disaster recovery testing, cyber vulnerability assessments, and logical segmentation analysis.

Requirements

2 years of experience operating and maintaining next generation firewalls. (Fortinet preferred)
5 years of experience in implementation and administration of LAN/WAN/Internet networks and services.

Nice To Haves

Experience designing, securing, and maintaining networks using Fortinet Firewalls.
Experience maintaining security applications such as intrusion prevention, antivirus, patch assessment, security incident and event management (SIEM)
Experience in a NERC CIP Low program development and execution
Experience with Routing, Switching, Datacenters, VPN, LAN, WAN, Wireless, Network Security, Intrusion Detection, and Anti-Virus.
Power industry or other industrial experience in an IT/OT environment.
Experience working with Ovation, T3000, Symphony +, or GE Control Systems
Experience working with Nozomi, Dragos, Tenable OT, Darktrace, Claroty, or similar product.
Working knowledge of cybersecurity and security tools
Demonstrated ability to communicate (verbal and written) with all levels of internal and external customers.
Demonstrated project management skills.
Demonstrated ability to work independently and as a team member.
Demonstrated ability to set priorities and to respond to changing demands from multiple sources.
Ability to exercise discretion and independent judgment in applying established techniques, procedures, or standards.
Demonstrated analytical and problem-solving skills.
Ability to work in power plant, data center, or office environment as needed.
Experience maintaining servers.
Understanding of Citrix and VMWare

Responsibilities

Network design and implementation for secure networks relating to NERC CIP compliance and cyber security of the fleet.
Network segmentation and protection to meet compliance goals.
Working independently, perform and/or coordinate all site-specific activities, tests and controls for meeting program requirements and ongoing compliance of Fortinet network infrastructure.
Utilize tools such as FortiManager, FortiAnalyzer, FortiSIEM to monitor and maintain the operation and security of the Fortinet infrastructure.
Assist in preparation for various audits and act as subject matter expert (SME)
Lead the maintenance of the CIP network policies and procedures such as change control procedures, back-up, and disaster recovery plans.
Serve as SME on hardware, software, and control architectures for CIP.
Utilize best practices and knowledge of internal/external issues to improve or recommend technical or compliance solutions.
Monitor electronic perimeters for potential breaches/vulnerabilities and act as first responder for any potential incident.
Provide input for detailed analysis, diagnosis and mitigation based upon findings and deficiencies for operational or compliance issues.
Through cross training, provide backup activities and response for the CIP team.