Senior Network and Cybersecurity Engineer

FuelCell Energy•Danbury, CT

17h•$113,000 - $126,000•Hybrid

About The Position

FuelCell Energy is seeking a Senior Network and Cybersecurity Engineer to take ownership of the company’s network and its security as part of the Global Infrastructure team. This hands-on, highly technical role spans network engineering and cybersecurity, supporting infrastructure across corporate offices, manufacturing facilities, Microsoft Azure, and Operational Technology (OT) environments. The engineer will design, secure, and support the network, applying sound security practices and collaborating with cross-functional teams. The position is hybrid and requires onsite work in Danbury, Connecticut. For the first 90 days, the schedule is four days onsite and one day remote; thereafter, it is three days onsite and two days remote. The role also requires onsite work at the Torrington facility one day every two weeks or as needed. Occasional after-hours, weekend, or on-call work may be required to support maintenance windows, OT production schedules, and security incidents.

Requirements

Bachelor’s degree in information technology, cybersecurity, computer science, engineering, or a related discipline; extensive experience may be considered in lieu of a degree.
Five or more years of progressive experience in network engineering and cybersecurity.
Three or more years of hands-on experience designing, securing, and operating Microsoft Azure in a production enterprise environment (required).
Expertise in network engineering across LAN, WAN, wireless, and cloud, including routing and switching, next-generation firewalls, VPNs, and secure network segmentation.
Expertise in Microsoft Azure networking and security, including virtual networks, hybrid connectivity, and native network security controls.
Hands-on troubleshooting experience with complex issues across network, cloud, and security layers.
Working knowledge of Microsoft security tools such as Entra ID, Defender for Cloud, and Microsoft Sentinel.
Working knowledge of OT/ICS network security concepts such as IEC 62443 and the Purdue Model.
Working knowledge of security frameworks such as NIST CSF and CIS Controls.
Strong communication skills, including clear documentation and the ability to explain technical topics to non-technical stakeholders.
Strong problem-solving skills and a track record of delivering complex technical projects.
Ability to lift, carry, or move equipment weighing up to 25–35 lbs.
Ability to bend, crouch, or reach to access equipment and workspace areas as needed for technical support.
Ability to wear required Personal Protective Equipment (PPE) as designated based on the work location.
Ability to walk or stand for short periods while performing onsite support.
Ability to sit for extended periods while working on a computer or performing monitoring tasks.
Successful completion of a drug screen, criminal background check, and employment and education verification.

Nice To Haves

Relevant certifications such as Microsoft AZ-500 or AZ-700, CCNP, CISSP, or GICSP.
Experience in manufacturing, energy, utility, or other industrial environments, including exposure to OT networks.
Familiarity with Infrastructure as Code, such as Bicep or Terraform, and scripting, such as PowerShell or Python.
Familiarity with OT security monitoring platforms such as Microsoft Defender for IoT, Claroty, Nozomi Networks, or Dragos.
Exposure to Zero Trust Network Access (ZTNA) platforms and SOX or other compliance audits.

Responsibilities

Own the design, implementation, and support of company network infrastructure, including LAN, WAN, wireless, firewalls, VPN, and Azure connectivity.
Develop and maintain a network roadmap to provide reliable, secure, and scalable connectivity across company facilities.
Serve as the senior escalation point for complex network, connectivity, and security issues.
Design and secure Azure networking and hybrid connectivity using Zero Trust and least-privilege principles.
Implement and continually improve security controls across Azure and the network, partnering with the cybersecurity team on identity, monitoring, and threat detection.
Support secure segmentation and remote access between IT and OT environments in collaboration with operations and engineering, protecting production-system availability and safety.
Lead infrastructure and security projects from planning through delivery.
Manage patching and vulnerability remediation for network and security infrastructure.
Support incident response, disaster recovery, and audit activities, including SOX.
Maintain clear documentation and change control, and share knowledge with IT, OT, and cybersecurity teammates.