Network Engineer, Sr.
About The Position
Centrus Energy is seeking a Network Engineer / Network Architect to modernize and secure Operational Technology (OT) and Industrial Control System (ICS) environments supporting critical energy-sector operations. The role spans network engineering, cybersecurity, and mission support for nuclear, high-voltage, and facility-scale systems. The engineer will architect secure, segmented OT/ICS networks; develop high-availability designs for industrial control and automation; implement secure access pathways; and build network zones, conduits, DMZs, and trusted data flows. The role also involves configuring and maintaining industrial network infrastructure, supporting facility systems, and maintaining diagrams, inventories, IP schemas, and configuration-controlled documentation. The position applies cybersecurity controls and supports DOE readiness activities, audits, vulnerability management, and collaboration with cybersecurity teams. It also includes developing safe automation workflows, integrating network health and security telemetry, and preparing change-control and incident-response materials. This is an on-site role supporting plant-floor and mission-critical operations. Occasional 24/7 on-call participation and travel to facilities, secured areas, or plant locations may be required. PPE and safety training are required. The successful candidate must obtain and maintain a Q security clearance. Employment requires identity and work-eligibility verification, a pre-employment background check and drug test, and participation in applicable security-related drug testing and background investigations.
Requirements
- 5–10+ years of network engineering or architecture experience, including 3+ years supporting OT/ICS in critical infrastructure.
- Bachelor's degree in a related field.
- Experience with SCADA, historians, and PLC/DCS systems.
- Experience with industrial protocols such as Modbus, DNP3, EtherNet/IP, OPC-UA, and Profinet.
- Experience with NIST 800-82, NIST 800-53/171, and related frameworks.
- Experience with industrial network equipment such as Cisco IE/Stratix, Hirschmann, and Moxa.
- Experience with OT firewall and DMZ architecture, including Palo Alto, Fortinet, or ASA.
- Experience in energy, utilities, nuclear, national laboratories, or similarly high-security sectors.
- Strong collaboration with Controls, Facilities, Cybersecurity, and mission-support partners.
- Must be eligible to obtain and maintain a Q or L clearance; the position requires the successful candidate to obtain and maintain a Q security clearance.
- Ability to work on-site and meet PPE and safety-training requirements.
Nice To Haves
- Certifications such as CCNP/CCIE, GICSP, ISA/IEC 62443, CISSP, or PCNSE.
- Experience with OT cybersecurity platforms such as Nozomi, Claroty, or Dragos.
- Background supporting DOE or other highly regulated environments.
- Familiarity with cyber audits, readiness reviews, and facility safety/security protocols.
Responsibilities
- Architect secure, segmented OT/ICS networks using the Purdue Model (Levels 0–3).
- Develop high-availability, deterministic network designs supporting SCADA, PLCs, DCS, historians, and real-time automation.
- Implement secure vendor and remote access pathways aligned with cybersecurity frameworks.
- Build network zones, conduits, DMZs, and trusted data-flow architectures for mission operations.
- Design and support industrial protocol environments, including Modbus, DNP3, EtherNet/IP, OPC-UA, Profinet, IEC 61850, and BACnet.
- Configure and maintain industrial-grade switches, routers, firewalls, and ruggedized hardware.
- Support facility systems such as building automation, utilities, power systems, and nuclear or experimental equipment.
- Maintain network diagrams, inventories, IP schemas, and documentation aligned with cybersecurity and configuration controls.
- Apply NIST 800-82, NIST 800-53/171, and ISA/IEC 62443 security controls.
- Support DOE readiness activities, audits, and assessment documentation.
- Collaborate with cybersecurity teams on firewall policies, monitoring, logging, and threat detection.
- Support vulnerability management while maintaining operational uptime in sensitive environments.
- Build automation workflows using Ansible or Python where safe and appropriate.
- Integrate network health and security telemetry using approved OT monitoring platforms.
- Develop documentation, change-control packages, and incident-response materials.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
