Network Engineer, Sr.

Centrus Energy • Oak Ridge, TN

6d • Onsite

About The Position

Make an Impact in America’s Energy Future
Are you passionate about building secure, resilient networks that keep critical infrastructure running safely and reliably? Do you thrive in environments where precision, safety, and mission-driven engineering truly matter? If so, we want you on our team.
We’re looking for a talented Network Engineer / Network Architect to help modernize and secure Operational Technology (OT) and Industrial Control System (ICS) environments that support some of the nation’s most critical energy-sector operations. This is a chance to work at the crossroads of advanced engineering, cybersecurity, and national mission support—directly contributing to safe, efficient operations across nuclear, high‑voltage, and facility‑scale systems.

Requirements

• 5–10+ years in network engineering/architecture, including 3+ years supporting OT/ICS in critical infrastructure.
• Experience with SCADA, historians, PLC/DCS systems.
• Experience with industrial protocols such as Modbus, DNP3, EtherNet/IP, OPC‑UA, Profinet.
• Experience with NIST 800‑82, NIST 800‑53/171, and related frameworks.
• Experience with industrial network gear (Cisco IE/Stratix, Hirschmann, Moxa).
• Experience with OT firewall/DMZ architecture (Palo Alto, Fortinet, ASA).
• Experience in energy, utilities, nuclear, national labs, or similarly high‑security sectors.
• Strong collaboration with Controls, Facilities, Cybersecurity, and mission support partners.
• Must be eligible for Q or L clearance.
• In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
• This position will require a pre­-employment background check and a pre-employment drug test.
• This position requires the successful candidate to obtain and maintain a Q security clearance.
• Candidates for positions requiring a security clearance are required to be tested for the absence of any illegal drug as defined in 10 CFR 707.4 prior to an offer of employment being made.
• In addition, once employe, employees will become part of a random drug testing program and may also be tested in the event of any incident causing injury or causing damage to property, or if it is determined that there is a reasonable suspicion the employee is under the influence of drugs or alcohol.
• This position will require preemployment background check on the part of the Company and in order to receive a Q security clearance, a background investigation by the Federal government.
• Subsequent Federal government reinvestigations may be required.

Nice To Haves

• Certifications such as CCNP/CCIE, GICSP, ISA/IEC 62443, CISSP, PCNSE.
• Experience with OT cybersecurity platforms (Nozomi, Claroty, Dragos).
• Background supporting DOE or other highly regulated environments.
• Familiarity with cyber audits, readiness reviews, and facility safety/security protocols.

Responsibilities

• Architect secure, segmented OT/ICS networks using the Purdue Model (Levels 0–3).
• Develop high‑availability, deterministic designs supporting SCADA, PLCs, DCS, historians, and real‑time automation.
• Implement secure vendor/remote access pathways aligned to cybersecurity frameworks.
• Build zoning, conduits, DMZs, and trusted data‑flow architectures for mission operations.
• Design and support industrial protocol environments (Modbus, DNP3, EtherNet/IP, OPC‑UA, Profinet, IEC 61850, BACnet).
• Configure and maintain industrial‑grade switches, routers, firewalls, and ruggedized hardware.
• Support facility systems such as building automation, utilities, power systems, and nuclear/experimental equipment.
• Maintain diagrams, inventories, IP schemas, and documentation aligned with cybersecurity and configuration controls.
• Apply NIST 800‑82, NIST 800‑53/171, and ISA/IEC 62443 security controls.
• Support DOE readiness activities, audits, and assessment documentation.
• Collaborate with Cybersecurity teams on firewall policies, monitoring, logging, and threat detection.
• Support vulnerability management while maintaining operational uptime in sensitive environments.
• Build automation workflows (Ansible/Python) where safe and appropriate.
• Integrate network health and security telemetry using approved OT monitoring platforms (Nozomi, Claroty, Splunk, SolarWinds, ELK/Grafana).
• Develop crisp documentation, change‑control packages, and incident response materials.

Benefits

• Centrus Energy and all subsidiaries shall abide by the applicable legal requirements.
• We prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity or national origin.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed