IT Network Manager

Frank Calandra Jennmar Services • Pittsburgh, PA

3d

About The Position

This professional leadership position is responsible for the strategy, design, operation, and security of Jennmar’s global network and unified communications environment, including the enterprise-to-plant network boundary. The IT Network Manager leads the Network Team and owns the global WAN, LAN, wireless, firewall, remote access, and voice platforms connecting corporate offices, data centers, cloud services, and manufacturing plants.

A core requirement is expertise in Operational Technology (OT) networking and the Purdue Enterprise Reference Architecture (Purdue Model). The manager leads IT/OT segmentation across manufacturing sites, partnering with plant engineering, operations, and cyber security to protect safety, production uptime, and data integrity in alignment with NIST SP 800-82 and ISA/IEC 62443.

The role oversees global network operations and IT/OT security, sets technical standards and roadmaps, manages team performance and budgets, and collaborates with internal teams and external vendors. The position requires flexibility for after-hours change windows, on-call escalation, and domestic and international travel.

Requirements

• Bachelor of Science in Computer Science, Information Technology, Network Engineering, or a related field; equivalent experience is considered.
• 10+ years of enterprise network engineering and operations experience.
• 5+ years in a supervisory or managerial role leading a network team.
• 3–5 years of hands-on experience designing, securing, or supporting OT/Industrial Control System (ICS) networks in a manufacturing or industrial environment.
• Demonstrated experience applying the Purdue Model (Levels 0–5) to design and implement IT/OT segmentation, including an Industrial DMZ.
• Experience managing a multi-site global network (WAN/LAN/WLAN) supporting 24x7 manufacturing operations.
• Expert knowledge of network and data communication protocols, dynamic routing (BGP, OSPF), switching, VLANs, QoS, and high-availability design.
• Strong experience with SD-WAN and SASE architectures, carrier-managed WAN services, and next-generation firewalls.
• Working knowledge of enterprise wireless, VPN/ZTNA remote access, network access control, and network monitoring and observability tools.
• Expert understanding of Purdue Model levels and their functions and trust boundaries, from process and basic control through enterprise.
• Ability to design and implement zones and conduits per ISA/IEC 62443, including Security Level targets and IDMZ service brokering.
• Working knowledge of industrial protocols and assets such as EtherNet/IP, CIP, Modbus TCP, PROFINET, OPC UA/DA, PLCs, HMIs, SCADA, and historians, and how they behave on a network.
• Experience with OT asset discovery and passive OT threat monitoring platforms.
• Understanding of safety-first, availability-driven OT priorities and consequence-based risk prioritization; ability to make production network changes without disrupting operations.
• Familiarity with secure OT remote access, including MFA and time-bound, monitored, and logged vendor sessions, and with controls commonly evaluated by cyber insurers and auditors.
• Ability to lead, mentor, and develop technical staff; set priorities; and manage workload across projects and operations.
• Strong project planning, budgeting, vendor management, and documentation skills.
• Ability to communicate technical risk clearly to executives, plant leadership, engineers, and end users.
• Cultural sensitivity and ability to support a global user base that may include people with limited English or English as a second language.
• Ability to work a flexible schedule, including after-hours change windows, on-call escalation, and domestic and international travel.

Nice To Haves

• Certifications such as CCNP/CCIE or Fortinet NSE 4–7.
• ISA/IEC 62443 Cybersecurity Certificate/Expert or GIAC GICSP/GRID.
• CISSP.
• PMP or equivalent.
• Fortinet FortiGate/SASE experience.
• Cisco/Meraki experience.
• Experience with unified communications and cloud voice platforms such as Webex Calling and Microsoft Teams Voice, and video conferencing.
• Experience with OT asset discovery and passive monitoring platforms such as Claroty, Nozomi Networks, Dragos, Microsoft Defender for IoT, or Armis.

Responsibilities

• Lead, manage, and develop the Network Team; set goals, assign work, conduct reviews, and build OT networking capability across the team.
• Develop and communicate scope, goals, deliverables, and milestones for network and IT/OT projects.
• Own the network budget, capital planning, and lifecycle/refresh roadmap; contribute to annual IT budget and prioritization.
• Own the design, operation, and performance of global WAN, SD-WAN/SASE, LAN, wireless, firewall, VPN, and unified communications platforms, targeting secure, highly available services.
• Monitor network availability, performance, and capacity; lead root cause analysis and continuous improvement for network incidents.
• Establish and enforce network standards, configuration baselines, change management, and documentation.
• Lead network elements of site openings, acquisitions, integrations, and cutovers.
• Manage carrier, managed service provider, and network vendor relationships, contracts, service-level agreements, and renewals in partnership with procurement.
• Define and maintain target-state IT/OT segmentation architecture and reference designs based on the Purdue Model, NIST SP 800-82, and ISA/IEC 62443.
• Design, build, and operate the Industrial DMZ; enforce controlled conduits between enterprise and plant networks and eliminate direct IT-to-OT traffic and dual-homed systems.
• Lead plant network assessments and gap analyses, and develop a phased pilot-to-scale segmentation roadmap across manufacturing sites.
• Maintain accurate OT network and asset inventories, network diagrams, and data-flow documentation for each plant.
• Partner with Cyber Security to implement OT monitoring, secure remote access, SIEM/SOC logging, vulnerability management, and OT incident response playbooks and tabletop exercises.
• Collaborate with plant engineering, maintenance, controls integrators, and equipment OEMs to plan maintenance windows and ensure network changes support safety and production continuity.
• Ensure continuous operations through resilient design and failover; validate and periodically test network recovery procedures, including OT recovery from ransomware scenarios.
• Develop, implement, and maintain network security controls; validate controls and recommend process improvements.
• Support internal and external audits, cyber insurance assessments, and due-diligence reviews related to network and OT security.
• Recommend, develop, and support adherence to Corporate IT standards, policies, and procedures in accordance with best practices.
• Lead and assist IT teammates with troubleshooting, including problem identification, resolution, communications, and coordination with IT and third parties.
• Stay current on network, SASE, and OT security technologies, threats, and regulatory developments.
• Perform other related job duties as requested by management.

Benefits

• Medical insurance with a standard PPO plan, deductibles as low as $1,500, and wellness credit up to $750.
• Free concierge primary care.
• Voluntary 401(k) plan with a current match of up to 12%.
• Voluntary dental plans.
• Voluntary vision plans.
• Free telemedicine services.
• Basic life insurance.
• Long- and short-term disability coverage.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager