IT Network Manager

JennChem•Pittsburgh, PA

About The Position

The IT Network Manager is a professional leadership role responsible for the strategy, design, operation, and security of Jennmar’s global network and unified communications environment, including the enterprise-to-plant network boundary. The manager leads the Network Team and owns global WAN, LAN, wireless, firewall, remote access, and voice platforms connecting corporate offices, data centers, cloud services, and manufacturing plants. A central responsibility is applying Operational Technology (OT) networking expertise and the Purdue Enterprise Reference Architecture (Purdue Model) to lead IT/OT segmentation across manufacturing sites. The role partners with plant engineering, operations, and cybersecurity to protect safety, production uptime, and data integrity in alignment with NIST SP 800-82 and ISA/IEC 62443. The position oversees network operations, engineering, team development, budgets, vendors, security, resilience, and IT/OT projects. It supports a global user base and requires a flexible schedule that may include after-hours change windows, on-call escalation, and domestic and international travel.

Requirements

Bachelor of Science in Computer Science, Information Technology, Network Engineering, or a related field; equivalent experience is considered.
10+ years of enterprise network engineering and operations experience, including 5+ years in a supervisory or managerial role leading a network team.
At least 3–5 years of hands-on experience designing, securing, or supporting OT/Industrial Control System networks in a manufacturing or industrial environment.
Demonstrated experience applying the Purdue Model (Levels 0–5) to design and implement IT/OT segmentation, including an Industrial DMZ.
Experience managing a multi-site, global WAN/LAN/WLAN network supporting 24x7 manufacturing operations.
Expert knowledge of network and data communication protocols, dynamic routing (BGP, OSPF), switching, VLANs, QoS, and high-availability design.
Strong experience with SD-WAN and SASE architectures, carrier-managed WAN services, and next-generation firewalls.
Working knowledge of enterprise wireless, VPN/ZTNA remote access, network access control, and network monitoring and observability tools.
Experience with unified communications and cloud voice platforms and video conferencing.
Expert understanding of Purdue Model levels, their functions, and trust boundaries, including Level 3.5 Industrial DMZ.
Ability to design and implement zones and conduits per ISA/IEC 62443, including Security Level targets and Industrial DMZ service brokering.
Working knowledge of industrial protocols and assets, including EtherNet/IP, CIP, Modbus TCP, PROFINET, OPC UA/DA, PLCs, HMIs, SCADA, and historians, and how they behave on networks.
Experience with OT asset discovery and passive OT threat-monitoring platforms.
Understanding of safety-first, availability-driven OT priorities and consequence-based risk prioritization; ability to make production network changes without disrupting operations.
Familiarity with secure OT remote access, including MFA and time-bound, monitored, and logged vendor sessions, and controls commonly evaluated by cyber insurers and auditors.
Ability to lead, mentor, and develop technical staff; set priorities; and manage workloads across projects and operations.
Strong project planning, budgeting, vendor management, and documentation skills.
Ability to communicate technical risk clearly to executives, plant leadership, engineers, and end users.
Cultural sensitivity and ability to support a global user base that may include people with limited English or English as a second language.
Ability to work a flexible schedule, including after-hours change windows, on-call escalation, and domestic and international travel.

Nice To Haves

CCNP/CCIE or Fortinet NSE 4–7 certification.
ISA/IEC 62443 Cybersecurity Certificate/Expert or GIAC GICSP/GRID certification.
CISSP certification.
PMP or equivalent certification.
Fortinet FortiGate/SASE and Cisco/Meraki experience.

Responsibilities

Lead, manage, and develop the Network Team; set goals, assign work, conduct reviews, and build OT networking capability across the team.
Define and communicate the scope, goals, deliverables, and milestones for network and IT/OT projects.
Own the network budget, capital planning, and lifecycle/refresh roadmap, and contribute to annual IT budget and prioritization.
Own the design, operation, and performance of global WAN, SD-WAN/SASE, LAN, wireless, firewall, VPN, and unified communications platforms to deliver secure, high-availability (99.9%+) services.
Monitor network availability, performance, and capacity; conduct root cause analysis and drive continuous improvement for incidents.
Establish, promote, and enforce network standards, configuration baselines, change management, and documentation.
Lead network work for site openings, acquisitions, integrations, and cutovers.
Manage carrier, managed service provider, and network vendor relationships, contracts, SLAs, and renewals in partnership with procurement.
Define and maintain target-state IT/OT segmentation architecture and reference designs based on the Purdue Model, NIST SP 800-82, and ISA/IEC 62443.
Design, build, and operate the Industrial DMZ; enforce controlled conduits between enterprise and plant networks; eliminate direct IT-to-OT traffic and dual-homed systems.
Lead plant network assessments and gap analyses, and develop a phased pilot-to-scale segmentation roadmap across manufacturing sites.
Maintain accurate OT network and asset inventories, network diagrams, and plant data-flow documentation.
Partner with Cyber Security on OT monitoring, secure remote access, SIEM/SOC logging, vulnerability management, OT incident response playbooks, and tabletop exercises.
Collaborate with plant engineering, maintenance, controls integrators, and equipment OEMs to plan maintenance windows and ensure network changes support safety and production continuity.
Ensure continuous operations through resilient design and failover; validate and periodically test network recovery procedures, including OT recovery from ransomware scenarios.
Develop, implement, and maintain network security controls; validate controls and recommend process improvements.
Support internal and external audits, cyber insurance assessments, and due-diligence reviews related to network and OT security.
Recommend, develop, and support adherence to Corporate IT standards, policies, and procedures in accordance with best practices.
Lead and assist IT teammates with troubleshooting, including problem identification, resolution, communications, and coordination with IT and third parties.
Stay current on network, SASE, and OT security technologies, threats, and regulatory developments.
Perform other related job duties as requested by management.