OT System Administrator

LS Power Development, LLC•Austin, TX

1d•Onsite

About The Position

As the OT System Administrator, you will be a foundational member of LS Power Grid’s Operational Technology security team, responsible for the secure, reliable administration of servers, infrastructure, and supporting platforms across critical grid operations. Your work will directly underpin the availability and integrity of systems that control and monitor the transmission grid — making your role essential to both operational continuity and regulatory compliance. This role spans the full breadth of enterprise systems administration: Windows and Linux server management, VMware virtualization, NetApp storage, RSA authentication, enterprise backup and recovery, and the supporting infrastructure that keeps OT environments stable and audit-ready. You will work closely with OT Security, Network Operations, and Compliance teams under NERC CIP requirements, owning system lifecycle activities from initial build and configuration through ongoing administration, patching, and incident response. This is a high-impact role where your technical depth and documentation discipline will directly support the safe and reliable operation of the power grid.

Requirements

Bachelor of Science in Information Technology, Computer Science, Engineering, or a related field; in lieu of degree, 8+ years of directly applicable IT/OT systems administration experience.
5+ years of experience in systems administration in regulated, mission-critical, or industrial environments.
Strong hands-on experience administering both Windows Server and Linux systems, including configuration, hardening, and lifecycle management.
Demonstrated experience with VMware virtualization platforms (vSphere, ESXi, vCenter), including virtual machine build, provisioning, and day-to-day administration.
Hands-on experience with NetApp storage administration, including volume management, snapshots, and replication.
Experience administering enterprise backup solutions such as Veeam or Commvault, including restore testing and documentation.
Demonstrated experience building and deploying physical servers, Windows-based workstations, and field devices from bare metal through production-ready configuration.
Working knowledge of RSA authentication infrastructure and enterprise identity and access management practices.
Solid working knowledge of Microsoft SQL Server administration, including routine maintenance, performance monitoring, and availability support for application-connected instances.
Excellent written and verbal communication skills with the ability to document and communicate across all organizational levels.
Self-motivation, discipline, and strong organizational and critical-thinking skills suited to a regulated environment.
Willingness to participate in scheduled on-call rotations supporting 24/7 OT system coverage.

Nice To Haves

Bachelor’s degree in Information Technology, Computer Science, Engineering, or equivalent work experience.
Direct experience supporting Operational Technology (OT), SCADA, EMS, or industrial control system (ICS) environments.
Experience building, configuring, or maintaining Remote Terminal Units (RTUs) or other Windows-based field devices in an OT or utility environment.
Familiarity but not limited to NERC CIP standards and compliance documentation requirements (CIP-007, CIP-008, CIP-009).
Familiarity with Splunk for log aggregation and security event monitoring.
Familiarity with Nessus Security Center and vulnerability management.
Familiarity with Tripwire Enterprise and configuration monitoring.
Experience with IBM BigFix, Symantec Endpoint Security, or Avigilon ACM platforms.
Familiarity with compliance tracking and incident documentation platforms (e.g., AssurX).
Prior experience in electric transmission, energy, or critical infrastructure environments.
Active security certification such as CompTIA Security+, Microsoft MCSA/MCSE, VMware VCP, or equivalent.

Responsibilities

Administer and maintain Windows Server and Linux systems supporting OT environments, including control centers, ancillary applications, and field-connected infrastructure.
Manage VMware virtualization platforms (vSphere, ESXi, vCenter) including virtual machine provisioning, template management, resource allocation, and performance tuning.
Administer NetApp storage infrastructure including volume provisioning, snapshot management, replication configuration, and capacity planning.
Manage RSA authentication infrastructure, including token administration, user provisioning, and integration with OT access control systems.
Perform routine system health checks, capacity monitoring, and performance tuning across OT-connected servers, applications, and storage platforms.
Provide scheduled on-call and incident response support for OT systems as part of a 24/7 rotation.
Build, image, configure, and deploy Windows-based workstations and field devices, including Remote Terminal Units (RTUs), for control center and field site environments.
Build and deploy physical servers and rack infrastructure, including hardware configuration, OS installation, hardening, and integration into OT environments.
Build and provision virtual servers within VMware environments from template or bare configuration through production-ready baseline.
Maintain standardized build documentation and configuration baselines for all endpoint, server, and field device types.
Coordinate field deployments with OT operations teams to minimize operational impact during installation and cutover activities.
Manage physical hardware assets including procurement coordination, imaging, asset tracking, and compliant end-of-life disposal.
Apply vendor-released security patches and updates.
Monitor FoxGuard advisories and vendor security bulletins on a weekly basis to assess patch criticality and prioritize remediation.
Implement and maintain system hardening configurations aligned to internal security baselines across Windows, Linux, and virtualization platforms.
Maintain auditable patch records and configuration baselines to support compliance reviews and audit evidence requests.
Utilize enterprise patch management tools (e.g., IBM BigFix) for deployment tracking and compliance reporting.
Administer enterprise backup solutions (Veeam and/or Commvault) for OT systems, including job configuration, retention policy management, and schedule verification.
Perform and document backup verification and restoration testing in compliance with CIP-009 requirements.
Support disaster recovery planning, execution, and documentation for critical OT infrastructure.
Coordinate with NetApp replication and snapshot capabilities to support backup redundancy and rapid recovery objectives.
Support compliance with NERC CIP standards, including but not limited to CIP-007, CIP-008, and CIP-009.
Integrate system logs with Splunk for centralized visibility and alerting; conduct weekly log reviews to identify anomalies and support incident detection.
Track incidents and compliance evidence in AssurX (or equivalent compliance tracking platform); participate in CIP-008 Security Incident Response Team (SIRT) exercises.
Collect and maintain audit evidence for technical controls, including patch records, configuration baselines, and security event logs.
Assist with vulnerability remediation, configuration reviews, and coordination with OT Security and Compliance teams during audits and regulatory assessments.
Administer endpoint protection (e.g., Symantec) and support security event monitoring activities.
Manage Active Directory infrastructure including user account lifecycle, group membership, and organizational unit structure.
Configure and maintain Group Policy Objects (GPOs) to enforce security settings and system configuration standards.
Administer DNS services, RSA authentication services, and privileged access management (PAM) controls.
Conduct regular access reviews to ensure least-privilege principles are maintained across OT-connected systems.
Support OT applications and services, including system dependencies, integrations, and service availability.
Administer Microsoft SQL Server instances supporting OT-connected applications, including routine maintenance, backup configuration, performance monitoring, and availability management.
Manage enterprise file shares, SharePoint, and document management systems (e.g., LaserFiche) including permissions, quotas, and retention policies.
Support application teams with database connectivity, instance health, and escalated troubleshooting for SQL Server-dependent OT systems.
Execute system changes through approved change management processes, including documentation of pre-change baselines and rollback procedures.
Maintain accurate and current system documentation including architecture diagrams, configuration standards, and operational runbooks.
Participate in bi-weekly technical reviews of system changes impacting compliance or OT operations.