OT Infrastructure Engineer

Inframark•Nashville, TN

5d•Hybrid

About The Position

Inframark is seeking an Operational Technology (OT) Infrastructure Engineer to join their Automation and Intelligence team. This role is a hands-on technical position responsible for the design, deployment, administration, support, and standardization of secure OT infrastructure environments for water, wastewater, and other critical infrastructure systems. The engineer will collaborate with project teams, field personnel, customers, and cybersecurity resources to ensure reliable OT systems for utility and industrial operations. Key areas of focus include Windows server and workstation administration, industrial network design, firewall configuration, remote access technologies, virtualization, SCADA/HMI/PLC connectivity, cybersecurity hardening, communications infrastructure, and lifecycle management.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related field preferred; equivalent experience may be considered.
5+ years of experience supporting information technology, operational technology, industrial network, or utility environments.
Experience deploying, administering, and supporting server, workstation, network, and virtualization technologies.
Experience supporting customer facing projects, field deployments, and operational support activities.
Strong knowledge of Windows Server, Windows Workstation, Active Directory, DNS, DHCP, Group Policy, patch management, system hardening, and Microsoft infrastructure services.
Strong knowledge of virtualization, backup, and recovery technologies, including VMware ESXi, vSphere, Hyper-V, Veeam, Synology, and related infrastructure platforms.
Strong understanding of industrial and enterprise networking concepts including routing, switching, VLANs, VPNs, firewall policies, wireless networking, cellular communications, network security, and secure remote access technologies.
Working knowledge of industrial networking and security platforms, including Fortinet Firewalls, FortiSwitch, FortiAP, FortiExtender, FortiSIEM, FortiNAC, Cisco, Allen-Bradley Stratix, Hirschmann, Siemens, and similar technologies.
Ability to design, deploy, maintain, support, and troubleshoot industrial network infrastructure, remote access solutions, firewall architectures, and secure connectivity environments.
Working knowledge of operational technology (OT), SCADA, HMI, PLC, industrial automation systems, industrial communications, telemetry systems, alarming platforms, remote access technologies, and remote site connectivity solutions.
Understanding of OT cybersecurity principles, including system hardening, vulnerability remediation, endpoint protection, certificate management, network segmentation, secure remote access, and defense-in-depth architectures.
Working knowledge of cybersecurity frameworks and industry best practices applicable to utility and industrial environments, including NIST CSF, ISA/IEC 62443, AWWA guidance, and EPA cybersecurity recommendations.
Ability to develop and maintain technical documentation, network diagrams, configuration standards, installation records, and operational procedures.
Strong analytical, troubleshooting, and root cause analysis skills across servers, workstations, network infrastructure, virtualization platforms, communications systems, and OT environments.
Ability to support customer-facing projects, managed services, field operations, and utility infrastructure environments.
Ability to support startup, commissioning, maintenance, incident response, and operational activities in utility and industrial environments.
Strong verbal and written communication skills with the ability to effectively interact with customers, vendors, project teams, and operational personnel.
Ability to manage multiple priorities and projects while working independently and collaboratively across technical and operational teams.

Nice To Haves

Water, wastewater, industrial, SCADA, or critical infrastructure experience preferred.
Industry certifications such as Microsoft Windows Server Administrator, Microsoft Azure Administrator, Fortinet NSE, Cisco CCNA/CCNP, VMware VCP, ISA/IEC 62443 Cybersecurity Certificate, CompTIA Network+, CompTIA Security+, CISSP, Rockwell Automation, Siemens, Hirschmann, or equivalent technical certifications are preferred.
Familiarity with operational support platforms and services including Microsoft 365, Rackspace, enterprise messaging services, and communication technologies used for SCADA alarm and operational notification systems.
Familiarity with database technologies commonly used in OT environments, including Microsoft SQL Server, MySQL, PostgreSQL, and related platforms.

Responsibilities

Install, configure, maintain, patch, upgrade, and secure Windows Server and Workstation operating systems supporting OT environments.
Configure and support Microsoft Active Directory, DNS, DHCP, Group Policy, and related infrastructure services.
Install, configure, and support virtualization platforms including VMware ESXi, vSphere, and Hyper-V.
Design, deploy, support, and troubleshoot industrial network infrastructure, including switching, routing, firewalls, VPNs, wireless, and cellular communications.
Design, deploy, support, and migrate secure remote access solutions, including IPsec VPN technologies, BeyondTrust, and approved remote connectivity platforms.
Support SCADA, HMI, PLC, alarming, telemetry, and operational technology system communications and connectivity.
Configure and support remote site communications technologies, including cellular modems, Sierra Wireless devices, enterprise text messaging services, and associated connectivity platforms.
Provide technical input for infrastructure design, hardware selection, project estimates, and customer solutions.
Evaluate and implement technologies that improve system reliability, maintainability, operational performance, and cybersecurity.
Develop and maintain network diagrams, configuration standards, installation documentation, and support procedures.
Implement and support cybersecurity controls including system hardening, vulnerability remediation, endpoint protection, certificate management, and secure remote access technologies.
Provide remote and onsite support for customer OT infrastructure environments.
Support startup, commissioning, warranty, managed services, and incident response activities.
Perform troubleshooting and root cause analysis for infrastructure, communications, and system issues.
Train customers, operators, and internal personnel on supported technologies, support processes, and security best practices.
Support server, workstation, networking, firewall, and remote access standardization efforts across customer environments.