Engineer II, OT Infrastructure

Enchanted Rock Management LLC • Houston, TX

4h

About The Position

ERock is seeking an Infrastructure Engineer II to lead hands-on engineering, configuration, and day-to-day administration of secure, resilient IT, OT, and industrial network and systems infrastructure across enterprise environments, data centers, and distributed microgrid sites. The role supports the reliability and security of ERock’s energy infrastructure and works across remote and enterprise environments.

The engineer configures and troubleshoots networks and security systems, maintains industrial connectivity, administers virtualization and Windows Server environments, and resolves complex incidents with helpdesk, security, OT, and field teams. The role also maintains infrastructure standards and documentation, including backups, disaster recovery procedures, templates, and runbooks. Local or regional travel of up to 20% is required.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.
• 5–7+ years of hands-on infrastructure and networking experience.
• Direct hands-on experience configuring, deploying, and troubleshooting Fortinet FortiGate firewalls, including firewall policies, IPsec/SSL VPNs, NAT, and core security profiles.
• Hands-on experience configuring, troubleshooting, and administering enterprise networking hardware and protocols, including BGP, OSPF, VLANs, IPsec VPNs, NAT, DNS/DHCP, QoS, and routing policy management.
• Working knowledge of industrial networks, including industrial managed switches, ruggedized field gear, and connectivity supporting SCADA and PLC communication.
• Direct working experience administering VMware environments, including ESXi, vCenter, VM provisioning, snapshot management, and virtual networking/vSwitches.
• Hands-on system administration experience with Windows Server environments and patch management.
• Experience implementing network security designs, including stateful inspection, access segmentation, and Zero Trust fundamentals.
• Experience deploying monitoring and alerting tools such as SNMP, Syslog, PRTG, SolarWinds, or Datadog.
• Proven track record managing multi-site deployment projects, coordinating with field technicians, and resolving escalated support tickets.
• Willingness to travel up to 20% locally or regionally.
• Ability to lift and carry equipment weighing up to 20 pounds, review schematics and computer screens, and communicate effectively across teams.

Nice To Haves

• Hands-on experience with edge-to-cloud IoT systems and their associated challenges.
• Deep hands-on experience architecting distributed IT/OT networks across energy, utilities, oil and gas, industrial, or other mission-critical environments.
• Experience designing and securing segmentation strategies aligned to the Purdue Model and regulatory standards such as NERC CIP.
• Expert-level experience with Fortinet, Cisco, and/or Palo Alto architecture.
• Experience modernizing legacy environments, reducing technical debt while increasing resiliency and compliance alignment.
• Strong routing expertise, including BGP, DMVPN, and IPsec, and understanding of high-availability connectivity for unreliable or remote infrastructure.
• Comfort owning architecture standards, reviewing designs, mentoring engineers, and acting as an escalation authority.
• Advanced certifications such as CCNP, CISSP, CISM, Fortinet NSE/FCNSP, or PCNSE.
• Experience in utility, energy, industrial, or OT environments.
• Familiarity with Modbus TCP, DNP3, industrial switches, fiber, and redundant network topologies.
• Experience with Azure networking and hybrid identity.

Responsibilities

• Support secure, reliable infrastructure across ERock’s enterprise, data center, and remote microgrid environments.
• Configure and troubleshoot networks and security, including SD-WAN, firewalls, switches, VPN tunnels, and hybrid cloud connectivity.
• Maintain industrial connectivity for SCADA, PLCs, RTUs, and remote monitoring systems.
• Administer VMware, Windows Server, and Active Directory, including provisioning, patching, and maintenance.
• Resolve complex incidents with Helpdesk, Security, OT, and field teams while helping minimize operational disruptions.
• Maintain standards and documentation, including backups, disaster recovery procedures, templates, and runbooks.
• Manage multi-site deployment projects and coordinate with field technicians.
• Deploy monitoring and alerting tools to proactively detect performance issues and latency spikes.

Benefits

• Competitive pay
• Medical, dental, vision, and prescription drug insurance
• Company-paid life insurance
• Flexible Spending Account (FSA)
• Health Savings Account (HSA) with a company contribution
• Wellness programs and incentives
• 401(k) retirement plan and company match
• Paid time off, including sick and vacation time
• Paid holidays

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level