IT / OT Network Administrator II

GENESIS ENERGY, LLC • Houston, TX

2d • Onsite

About The Position

Genesis Energy, L.P. is seeking an experienced IT / OT Network Administrator II to join our Corporate IT Infrastructure team in Houston. This role reports to Corporate IT and serves as a technical resource for IT and OT network architecture and security. The Network Administrator II works independently and collaboratively with Pipeline Operations, Control Room, and Engineering teams to support the design, implementation, maintenance, and security of IT and Operational Technology (OT) networks supporting Genesis’s onshore and offshore midstream assets, including pipelines, terminals, and offshore platforms in the Gulf of America. This role operates as a senior individual contributor and collaborates closely with Infrastructure, Security, and Operations leadership.

Requirements

• Minimum 5 years of experience administering IT and/or OT networking, firewall, and security solutions, including demonstrated experience in a senior individual contributor or technical lead capacity
• Minimum 3 years of experience in oil & gas, midstream, or other critical infrastructure sectors with demonstrated knowledge of pipeline operations and OT environments.
• Advanced knowledge of network administration – Ethernet switching, TCP/IP subnetting and routing (static, dynamic, BGP, OSPF, EIGRP), DHCP, DNS, QoS, and Cisco network equipment; demonstrated ability to design and implement complex multi-site network architectures.
• Willingness to travel by vehicle and offshore by helicopter
• Strong written and verbal communication skills, including the ability to produce clear technical documentation and communicate effectively in person, by phone, and via radio.
• Ability to obtain a TWIC (Transportation Worker Identification Credential) for port and offshore facility access.
• Ability to pass pre-employment, random, post-incident, and reasonable suspicion drug and alcohol testing in accordance with DOT/PHMSA and company policy.
• Hands-on experience with OT and IT monitoring platforms (SolarWinds, Dragos, Claroty, Nozomi) in a production environment; ability to configure, tune, and interpret alerts from these platforms.
• Ability to work independently with minimal supervision
• Strong analytical and technical problem-solving skills
• Ability to interact and communicate effectively across IT and Operations teams
• Flexibility to work overtime when needed, nights, and weekends when needed (incident response / maintenance windows).

Nice To Haves

• Bachelor’s Degree, or equivalent, preferred
• Experience with industrial automation vendors (Rockwell/Allen-Bradley, Schneider, Emerson, ABB) from a networking perspective, preferred
• System administration experience with VMware, Cisco, Microsoft System Center, preferred
• Active GICSP (Global Industrial Cyber Security Professional) certification, or equivalent (CCNP Security, CISSP, or CompTIA Security+); additional ICS/OT-specific certifications (e.g., ISA/IEC 62443 Cybersecurity Certificate) strongly valued, preferred
• Working knowledge of TSA Pipeline Security Directives (SD Pipeline-2021-01/02 series) and TSA Security Guidelines for pipeline operators; experience applying these requirements in an operational environment, preferred
• Working knowledge of API 1164 (Pipeline SCADA Cybersecurity) and NIST Cybersecurity Framework, with demonstrated ability to apply these frameworks to assess gaps and implement controls in an OT environment, preferred
• Knowledge of securing and monitoring IDS/IPS and SCADA Control Systems, preferred
• Experience supporting network and OT security assessments and remediation activities, preferred
• Windows and Linux server administration experience, preferred
• Demonstrated experience applying IEC 62443 / ISA-99 standards to design and implement network segmentation and security zones in an industrial control system environment, preferred
• Experience in network infrastructure projects end-to-end, including scoping, vendor coordination, change management, implementation, and post-deployment validation, preferred

Responsibilities

• Designs, implements, and supports IT and OT network infrastructure in a distributed environment including architecture design, implementation, maintenance, monitoring, documentation, upgrades, troubleshooting, and tiered support; independently resolves complex issues and serves as an escalation point for Level I staff.
• Performs advanced monitoring and analysis of network and server performance (e.g. traffic connect time, transmission speeds, packet sizes, and throughput); diagnoses complex root-cause issues, implements configuration changes, and develops recommendations for long-term capacity and reliability improvements.
• Updates network-related software and firmware to maintain compliance with company standards and regulations.
• Designs, implements, and enforces segmentation and security of control system networks (SCADA, PLCs, RTUs) in accordance with IEC 62443 / ISA-99 and TSA Pipeline Security Directives; leads zone-and-conduit architecture reviews and documents security posture.
• Coordinates audits of field sites and supporting data center infrastructure; partners with Operations and IT to validate controls, identify gaps, prioritize remediation, and drive compliance with regulatory and company standards.
• Coordinates with Pipeline Control Room, Measurement, and Automation teams on network changes affecting control system availability.
• Maintains and enhances the IT/OT DMZ and jump-host architecture consistent with the Purdue Reference Model; evaluates architecture changes, advises on improvements, and ensures configurations remain aligned with current security standards.
• Physically installs and maintains datacenter and remote site hardware.
• Compiles and maintains diagrams, documentation, records, and reports concerning network implementation, operations, and maintenance.
• Performs network configuration changes for various equipment such as routers, switches, firewalls, VPN, Wi-Fi, and SAN switching to enhance performance.
• Provides 24-hour emergency support, serves as senior resource in the on-call network support rotation, and acts as primary escalation contact for critical network outages affecting SCADA or pipeline operations.
• Participates in monthly and as needed server patching rotation.
• Travels to provide regional and offshore support of remote networks.
• Supports and executes response and remediation activities for network security incidents, including containment, root-cause analysis, post-incident review, and corrective action implementation.
• Owns and maintains network standards, change management procedures, and technical runbooks; ensures documentation is current, peer-reviewed, and accessible to the broader team.
• Manages vendor relationships, evaluates technology solutions, leads proof-of-concept efforts, and provides technical recommendations that inform purchasing decisions and strategic roadmap planning.
• Supports occasional ad hoc reporting or data requests related to network operations as needed

Benefits

• Highly competitive salary commensurate with experience.
• Medical/Rx, Dental, Life & Disability Insurance, Vision, Flexible Spending & Health Savings Accounts, available on 1st day of employment.
• Paid Time Off annual entitlement plus 11 company-paid holidays per year.
• 401(k) Savings Plan with up to 6% company match.
• Profit Sharing program: Company makes discretionary contributions between 4-6% of eligible pay in Q1 of the following year.
• Tuition reimbursement program available.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree