OT Infrastructure Engineer I

Enchanted Rock Management•Houston, TX

3d•Onsite

About The Position

We are ERock! ERock (NYSE:EROC) is a leader and innovator of Electrical Resiliency-As-A-Service. Our advanced dual-purpose microgrids protect companies, critical infrastructure, and communities from unexpected power outages, ensuring business continuity and civic durability. ERock’s dual-purpose microgrids use natural gas and renewable natural gas (RNG) to drive the nation’s most dependable microgrids — all while producing significantly lower to zero carbon emissions than traditional diesel backup generators. Powered by GraniteEcosystem™, our revolutionary software system, Enchanted Rock solutions provide 24/7/365 monitoring, optimization, and forecasts to enable worry-free, reliable power for businesses. The Enchanted Rock solution brings together patented technologies, advanced dual-purpose microgrid designs and integrated end-to-end services. The Power is On and we keep it on. Role Overview: We are seeking a motivated, technically grounded OT Infrastructure Engineer I to support and secure our operational technology infrastructure across remote and active production facilities. In this role, you will be on the front lines deploying, testing, maintaining, and troubleshooting field networks, industrial firewalls, switches, and cellular telemetry devices. You will partner closely with our Microgrid Control Center (MCC), field commissioning teams, and engineering groups to ensure high-availability communications and robust network security boundaries across all field sites.

Requirements

Associate or Bachelor’s degree in Network Engineering, Cybersecurity, Computer Information Systems, or equivalent technical certifications/hands-on experience (0–2 years in an IT/OT networking environment).
Strong working knowledge of IPv4 addressing, subnetting (VLSM/CIDR), DHCP, DNS, NAT/PAT, and OSI/TCP-IP reference models.
Practical understanding of Site-to-Site IPSec VPN configurations and Access Control List (ACL) syntax on routers and firewalls.
Familiarity with packet sniffers (such as Wireshark) to capture, filter, and inspect network traffic during troubleshooting.
Comfort terminating Ethernet cabling, tracing physical connections, mounting field hardware, and working in industrial or substation/microgrid environments.
Ability to communicate technical issues clearly under pressure, follow change control procedures, and collaborate effectively with remote teams.

Nice To Haves

Active foundational networking or security certifications (e.g., CompTIA Network+, Security+, Cisco CCNA, Fortinet FCIT/FCA, or Palo Alto PCCET).
Hands-on exposure to industrial protocols or environments (e.g., Modbus, DNP3, OPC-UA, SCADA systems).
Experience working with cellular modems (Cradlepoint, Sierra Wireless, Digi) and APN/SIM provisioning.

Responsibilities

Rack, cable, configure, and commission edge routers, switches, industrial firewalls, and third-party telemetry devices during new site test and turn-up phases.
Implement and maintain Access Control Lists (ACLs), firewall rules, and security zones to protect critical operational assets while isolating OT traffic from enterprise networks.
Deploy and support IPSec Site-to-Site VPN tunnels between industrial field locations, data centers, and cloud platforms; configure cellular gateways and manage SIM card activations with carriers.
Perform hands-on packet-level diagnostic analysis (using Wireshark, tcpdump, or CLI packet capture tools) to isolate connectivity drops, latency, routing anomalies, and protocol failures.
Microgrid Control Center & Commissioning Collaboration. Work directly with the MCC and commissioning engineers during site cutovers to validate end-to-end telemetry, verify SCADA/OT communications, and confirm network visibility.
Maintain precise IP address allocation tables, port mapping records, standard operating procedures, and site network topology diagrams.