Senior Network Engineer

Enchanted Rock Management LLC•Houston, TX

1h•Hybrid

About The Position

We are ERock! Enchanted Rock is a leader and innovator of Electrical Resiliency-As-A-Service. Our advanced dual-purpose microgrids protect companies, critical infrastructure, and communities from unexpected power outages, ensuring business continuity and civic durability. Enchanted Rock’s dual-purpose microgrids use natural gas and renewable natural gas (RNG) to drive the nation’s most dependable microgrids — all while producing significantly lower to zero carbon emissions than traditional diesel backup generators. Powered by GraniteEcosystem™, our revolutionary software system, Enchanted Rock solutions provide 24/7/365 monitoring, optimization, and forecasts to enable worry-free, reliable power for businesses. The Enchanted Rock solution brings together patented technologies, advanced dual-purpose microgrid designs and integrated end-to-end services. The Power is On and we keep it on. What you’ll do… As a Senior Network Engineer, you will own the strategy and design of secure, resilient IT and OT network architecture across Enchanted Rock’s enterprise systems, data centers, and distributed microgrid sites. You will Design and deploy scalable, highly available network solutions across distributed IT/OT environments, including SD-WAN, firewalls, and hybrid cloud (Azure + on-prem). Develop and implement secure network architecture and segmentation strategies aligned with the Purdue Model, Zero Trust principles, and regulatory standards (e.g., NERC CIP). Serve as the senior technical authority, establishing network standards and governance while partnering cross-functionally to ensure reliability, security, and compliance. Serve as both strategic architect and hands-on senior engineer, partnering with Helpdesk, Security, OT, and Infrastructure teams to deliver reliable, secure network solutions. You’ll make an impact by: Designing highly available, fault-tolerant networks that support power generation sites, remote monitoring platforms, and industrial control systems — ensuring uptime. Implementing segmentation, least-privilege access controls, MFA integration, secure WAN design, and next-generation firewall strategies to protect operational assets from evolving cyber threats. Designing scalable SD-WAN and hybrid cloud architectures that support hundreds of geographically dispersed energy assets while improving visibility, performance, and operational supportability. Building repeatable deployment models, documentation standards, and lifecycle governance frameworks that reduce technical debt and improve consistency across the fleet. Creating seamless, secure integration between enterprise IT systems and operational technology environments — enabling data flow, monitoring, compliance alignment, and business intelligence. Designing and supporting industrial connectivity — SCADA, PLC communications, cellular/satellite field deployments, and hybrid edge/cloud integration. Serving as the trusted design leader who can whiteboard strategy with executives in the morning and troubleshoot SCADA communications or firewall policies in the afternoon.

Requirements

Bachelor’s degree in Computer Science, IT, or related field (or equivalent experience). Formal training or certifications in infrastructure, networking, or related disciplines, with 7+ years of hands-on, applied experience.
Strong understanding of core networking technologies and protocols, with hands-on experience designing, configuring, and supporting physical and virtual networks across enterprise environments (routing, switching, DNS, WAN, firewalls, proxies, and global/local load balancing).
Working knowledge of infrastructure and network security best practices, including Zero Trust, micro-segmentation, and SASE architectures.
Hands-on experience with on-premises infrastructure, including hypervisors, virtualization platforms, and performance-critical systems.
Experience designing and implementing metrics, monitoring, and alerting pipelines, with proven ability to analyze, tune, and optimize on-premises systems for performance and low latency.
Experience supporting internal and external audits and implementing controls to meet regulatory and security compliance requirements.
Strong understanding of business drivers and their impact on infrastructure architecture, performance, monitoring, and operational best practices.
Demonstrated ability to plan and deliver multiple IT projects on time and within budget while collaborating effectively across cross-functional teams.
Willingness to travel up to 20% (local/regional).
Must be able to lift and carry files weighing up to 20 pounds, read printed materials and a computer screen, and communicate effectively in person and over the phone.

Nice To Haves

Have hands-on experience with edge-to-cloud IoT systems and the challenges that come with them.
Have deep hands-on experience architecting distributed IT/OT networks across energy, utilities, oil & gas, industrial, or other mission-critical environments.
Have designed and secured segmentation strategies aligned to Purdue Model and regulatory standards such as NERC CIP.
Bring expert-level experience with Fortinet, Cisco and/or Palo Alto architecture.
Have modernized legacy environments, reducing technical debt while increasing resiliency and compliance alignment.
Possess strong routing expertise (BGP, DMVPN, IPsec) and understand how to engineer high-availability connectivity across unreliable or remote infrastructure.
Are comfortable owning architecture standards, reviewing designs, mentoring engineers, and acting as escalation authority.
Hold advanced certifications (CCNP/CCIE, CISSP, CISM, Fortinet NSE/FCNSP, Palo Alto ACE, etc.) and bring both strategic and hands-on credibility.
Can translate business risk into technical design — and explain complex network architectures in plain English to non-technical stakeholders.

Responsibilities

Design and deploy scalable, highly available network solutions across distributed IT/OT environments, including SD-WAN, firewalls, and hybrid cloud (Azure + on-prem).
Develop and implement secure network architecture and segmentation strategies aligned with the Purdue Model, Zero Trust principles, and regulatory standards (e.g., NERC CIP).
Serve as the senior technical authority, establishing network standards and governance while partnering cross-functionally to ensure reliability, security, and compliance.
Serve as both strategic architect and hands-on senior engineer, partnering with Helpdesk, Security, OT, and Infrastructure teams to deliver reliable, secure network solutions.
Designing highly available, fault-tolerant networks that support power generation sites, remote monitoring platforms, and industrial control systems — ensuring uptime.
Implementing segmentation, least-privilege access controls, MFA integration, secure WAN design, and next-generation firewall strategies to protect operational assets from evolving cyber threats.
Designing scalable SD-WAN and hybrid cloud architectures that support hundreds of geographically dispersed energy assets while improving visibility, performance, and operational supportability.
Building repeatable deployment models, documentation standards, and lifecycle governance frameworks that reduce technical debt and improve consistency across the fleet.
Creating seamless, secure integration between enterprise IT systems and operational technology environments — enabling data flow, monitoring, compliance alignment, and business intelligence.
Designing and supporting industrial connectivity — SCADA, PLC communications, cellular/satellite field deployments, and hybrid edge/cloud integration.
Serving as the trusted design leader who can whiteboard strategy with executives in the morning and troubleshoot SCADA communications or firewall policies in the afternoon.