Sr. Network Engineer

SB Energy•San Diego, CA

11d•$100,000 - $140,000•Hybrid

About The Position

The Engineering and Innovation (E&I) team at SB Energy provides technical insights and assists decision-making across all life cycle phases of renewable projects, from development, construction, and to operations and maintenance. The Innovation program ideates, evaluates, demonstrates, and deploys at-scale first-of-a-kind technologies. The Senior Network Engineering role will be responsible for designing, implementing, maintain, and supporting SB Energy’s growing network infrastructure, which comprises of SB Energy’s utility scale power plants, remote operations center, and data center infrastructure. Additionally, this role will implement and maintain SB Energy’s cybersecurity plan.

Requirements

Bachelor’s degree or equivalent education and experience
5+ years of experience managing computer networks preferably in the OT energy sector (solar, battery storage, gas generation) and data center
5+ years of experience with Microsoft Azure networking, site-to-site connectivity, virtual networks, VPN gateways, cloud firewalls, and hybrid monitoring.
Experience with Palo Alto Networks/Cisco routers, firewalls, and switches, Dell Servers, Hyper-V, VMWare, Kubernetes, Docker
Current networking or security certifications such as CCNP/CCNA, PCNSE/PCNSA, GICSP, GRID, CISSP, or Security+.
Familiarity with the NIST Cybersecurity Framework, NIST SP 800-82, ISA/IEC 62443, and NERC CIP applicability and compliance processes.
Demonstrated strong engineering, design, and communication skills, and an ability to work in a dynamic team environment to think outside the box and solve traditional problems in new ways.
Self-starter with the ability to prioritize efforts and drive towards completion.
Strong verbal, written, interpersonal and communication skills

Nice To Haves

Datacenter knowledge in Electric Power Management System (EPMS) and Building Management Systems (BMS) is a plus
Broad experience across new solar technologies, energy storage, or application of artificial intelligence / machine learning to renewable energy.

Responsibilities

Own the end-to-end OT network architecture from development and detailed design through construction, commissioning, operations, upgrades, and asset handover.
Design resilient, segmented power plant and substation networks, including LAN/WAN, VLANs and VRFs, routing and switching, firewalls and DMZs, redundant paths, fiber and telecom circuits, wireless or cellular links, and secure cloud or remote operations connectivity.
Find solutions for telecomm/fiber to remote sites utilizing wireless or satellite backup communications
Create and maintain high- and low-level designs, network topology diagrams, IP address and VLAN plans, port/protocol matrices, firewall rule bases, equipment standards, bills of material, fiber schedules, test plans, and as-built records.
Lead equipment selection, configuration standards, capacity planning, procurement support, factory/site acceptance testing, commissioning, failover testing, and operational handoff.
Review EPC, OEM, integrator, and subcontractor designs and configurations; resolve technical gaps and verify that installations meet reliability, cybersecurity, schedule, budget, and supportability requirements.
Embed defense-in-depth into OT network designs and operating practices, using risk-based principles aligned with company policy, NIST guidance for OT security, ISA/IEC 62443, and applicable NERC CIP requirements.
Implement and govern security zones and conduits, firewall and access-control policies, industrial DMZs, allowlisted communications, least-privilege access, and documented separation between enterprise IT, site OT, vendor, and external networks.
Secure interactive and vendor remote access through approved VPNs, multi-factor authentication, jump hosts or privileged access controls, time-bounded access, session accountability, and rapid revocation.
Integrate network devices with centralized monitoring and security tooling, including health and performance monitoring, syslog/SIEM, time synchronization, configuration management, and OT-aware detection or network visibility platforms.
Assess third-party equipment, connections, and support models for cybersecurity risk before deployment, and ensure vendors follow approved remote-access, change-control, and incident-notification requirements.
Review network firmware updates and determine risk, impacts and implement updates
Report project progress updates to key stakeholders

Benefits

100% Company-Paid Medical, Dental & Vision (for employees and dependents)
401(k) with Company Match
Generous Paid Time Off + 11 Paid Holidays
12 Weeks Paid Parental Leave
Life, AD&D & Long-Term Disability Coverage
Flexible Spending Accounts (FSA) for Medical, Dependent Care, Transit & Parking (with company contributions)
Mental, Physical & Social Wellness Support (with company contributions)
Flexible Work Arrangements & Hybrid Office Setup
Monthly Reimbursement for Phone, Internet & Data
Optional Legal & Pet Insurance Plans
Device Purchase Support