Network Engineer

CVR Energy, Inc. • Sugar Land, TX

117d

About The Position

The Network Engineer is responsible for the design, implementation, security and lifecycle management of CVR Energy enterprise and SCADA network infrastructure across multiple datacenters and remote plant sites. This role requires deep expertise in Cisco based routing and switching, firewall administration, SCADA segmentation, and enterprise / industrial connectivity over LTE, VSAT, and private WAN circuits. The Network Engineer will support modernization efforts, including hardware refresh, vulnerability remediation, and secure network separation between corporation IT and SCADA environments. The role requires a balance of technical knowledge, hands-on configuration skills, ability to coordinate with, and ability to create structured network documentation. The Network Engineer will also act as a subject matter expert in network security, compliance, and collaborating with cross-functional IT and operations teams. Must understand TCP/IP and be able to identify issues with tools such as Sniffer or Incumbent as well as knowledge of firewalls. The position is responsible for monthly monitoring of switches, routers and firewalls for errors and utilization and provide reports on findings; ensures the network is up to date for PCI compliance and providing end user training and documentation where required. The Network Engineer should be knowledgeable in routing and switching designs, networking and security standards.

Requirements

• Bachelor's Degree in Information Systems, Information Technology, or other related scientific or technical discipline required.
• Computer Science, or related technical field; equivalent technical experience may be substituted, or demonstrated technical proficiency may be substituted for education requirements.
• 5+ years of experience with degree or 6+ years of experience in lieu of degree in broad network including some if not all the following: LAN/WLAN/SD-WAN experience and designing/implementing network infrastructure solutions in Windows and Linux/Unix environments.
• Working knowledge of cellular and/or satellite networks, cabling, racks, electricity/power, firewalls, TCP/IP, routing, switching, VLANS's, and SSL VPNs.
• Experience with Windows Server platforms emphasizing DNS and DHCP; and knowledge of QoS, CAR, SSL, BGP, HSRP, MPLS, IPSEC, iSCSI, EIGRP, OTV, VRRP, VDC, vPC, VSAN, ACL's and VACL's, DMVPN, T1's, DS3's, OC3's, OSPF, IPv4, Layer 2/3 diagrams, and NTP.
• Experience in Cisco network access control solutions (ACS, NAC, Forescout) preferred.
• Security: Cisco ASA, Firewalls, VPN/AnyConnect, ACL/TLS hardening, SNMPv3, SSHv2.
• Wireless: Cisco 9800 WLC, Catalyst 9100 APs, industrial wireless (IW9165E, 9130AXE in hazardous locations).
• SCADA/ICS Networking: Segmentation, DMZ design, redundant LTE/VSAT connectivity, vendor remote access.
• Vulnerability remediation (TLS cipher updates, IOS/ROMmon upgrades, ACL hardening, SSH/TLS enforcement).
• Lifecycle management: equipment refresh planning, SmartNet alignment, budget tracking + annual hardware replacement projects.
• Experience with monitoring, troubleshooting, and packet analysis tools (Wireshark, NetFlow, SolarWinds, etc.).
• Strong Visio documentation and structured project/change management.
• Ability to multi-task and manage multiple priorities while working independently.
• Interpersonal and relationship skills are necessary to work with an integrated team of project managers, developers, quality and other company engineers.
• Ability to converse verbally and in writing with good presentation, communication, organization and time management skills and understanding of how change management affects others.
• Demonstrate initiative and strong organizational and communication skills and the ability to develop and maintain effective working relationships with IT staff and all levels of the organization.
• Maintain established performance levels to achieve individual and group goals.
• Provide directions to lower-level staff to develop necessary skills to succeed and advance.
• Experience in the Energy and Refining industry preferred.
• Ability to adjust schedules to meet business needs.
• Fluent in English, oral and written.

Nice To Haves

• Relevant certifications preferred like Cisco CCNP, Forescout FSCA, Wireless and Security or equivalent.

Responsibilities

• Implement, and maintain secure enterprise network and SCADA network infrastructure across datacenters and remote plant sites.
• Implement vulnerability remediation program across 100+ devices, ensuring compliance with security baselines (TLS 1.2+, SSHv2, SNMP ACLs, etc.).
• Maintain and optimize SCADA/ICS network segmentation, DMZs, and secure vendor access.
• Serve as an escalation point for troubleshooting complex WAN/LAN/SCADA connectivity issues.
• Coordinate with vendors and carriers to resolve network incidents, negotiate contracts, and validate hardware/software upgrades.
• Develop and maintain detailed diagrams, change-control documents, risk/rollback/test plans, and SharePoint documentation repositories.
• Installs, and supports network communications, including LAN/WLAN/WAN/MAN systems, wireless networks and public ingress/egress points.
• Ensures stable operations within the production network including adhering to industry best practices such as change/incident management and information security policies and procedures.
• Coordinates with vendors and common carriers to resolve network operating problems and installations.
• Validates procedure and infrastructure documentation relating to network configuration, network mapping, processes, service records, etc.
• Evaluate existing equipment, hardware and software upgrades; interacts with vendors, outsources and contractors to secure network, products and services.
• Acts as an escalation point to the Service Desk team, Systems team, or Network Administrator position.
• Assist in the development and implementation of the network backup and recovery plans to ensure reliable network infrastructure.
• Maintains excellent communications with internal customers, IT resources, as well as external partners, consultants, and support teams.
• Updates job knowledge by participating in educational opportunities and professional organizations; reading professional publications, maintaining personal networks.
• Regularly communicates with supervisor about work progress, concerns and questions.
• Available for on-call support from on-site and remote users at any time, if necessary.

What This Job Offers

• Education Level: Bachelor's degree
• Number of Employees: 1,001-5,000 employees