26-077.B - System Admin

Harvest Midstream Company•Houston, TX

6d•Hybrid

About The Position

The Systems Administrator III (OT Infrastructure) is responsible for the administration, maintenance, integrity, and security of Operational Technology (OT) systems supporting midstream pipeline, compression, and processing operations. This role serves as the primary technical resource for SCADA platforms, process historians, industrial control systems (ICS), and the OT network infrastructure that underpins safe and continuous field operations. The position requires deep familiarity with ICS/SCADA environments, a working understanding of industrial communication protocols, and the discipline to apply cybersecurity best practices within a highly regulated and safety-critical operational context. The administrator works closely with Control Systems Engineers, Field Operations, IT, and EH&S to ensure OT assets are reliable, patched, monitored, and protected in accordance with NERC CIP, ISA/IEC 62443, and company standards.

Requirements

Demonstrated hands-on experience administering SCADA platforms in a pipeline, midstream, upstream, or utilities environment; familiarity with OSIsoft/AVEVA PI or equivalent process historian strongly preferred.
Working knowledge of OT/ICS network architecture (Purdue model / ISA-95 zone segmentation), including configuration and troubleshooting of managed switches, VLANs, and firewall rule sets in an OT context.
Practical understanding of industrial communication protocols: Modbus TCP/RTU, DNP3, OPC-DA, OPC-UA, and EtherNet/IP.
Familiarity with OT cybersecurity frameworks and regulatory requirements: NERC CIP, ISA/IEC 62443, and/or TSA Pipeline Security Directives.
Experience applying cybersecurity controls in OT environments (application whitelisting, patch management under change control, privileged access management, network segmentation) without disrupting operations.
Proficiency with Windows Server administration (Active Directory, Group Policy, DNS/DHCP) in an OT-isolated domain context; familiarity with hardening standards (DISA STIG, CIS Benchmarks) for control system workstations.
Scripting ability in PowerShell and/or Python for task automation, reporting, and data extraction from historian or SCADA databases.
Experience with OT asset management and passive network monitoring tools (Claroty, Dragos Platform, Nozomi Networks, Tenable OT, or similar).
Ability to read and interpret P&IDs, network diagrams, and control system architecture drawings at a functional level.
Highly self-motivated with strong attention to detail; capable of working independently in remote field locations and within confined or hazardous classified areas following safe work practices.
Strong written and oral communication skills; ability to translate OT technical issues for non-technical operations leadership and to collaborate effectively with Control Systems Engineers, Instrument Technicians, and IT peers.
Commitment to safety culture; understanding that changes to OT systems carry operational risk requiring disciplined change management and coordination with field operations.

Responsibilities

Administer and maintain SCADA platforms (e.g., Ignition, Wonderware, OSIsoft PI, GE iFIX/CIMPLICITY, or similar) including server/client configurations, tag databases, historian replication, and display development support.
Install, configure, patch, and lifecycle-manage OT servers, workstations, HMIs, and field computing assets in accordance with change management and safe work practices.
Maintain and support process historian infrastructure (e.g., OSIsoft PI / AVEVA PI) including server health, archive management, interface node configuration, and PI Vision/AF deployments.
Administer OT network infrastructure in the Purdue/ISA-95 zone model, including managed switches, firewalls, routers, and data diodes at the IT/OT DMZ boundary; coordinate with network engineering on segmentation and topology changes.
Implement, monitor, and enforce OT cybersecurity controls including application whitelisting, USB device controls, patch cadence management, antivirus (OT-safe tools), and account/privilege management for control system user populations.
Support compliance activities for NERC CIP and/or TSA Pipeline Security Directives, including asset inventory maintenance, access control reviews, baseline configuration documentation, and evidence collection for audits.
Perform vulnerability assessments on OT assets using OT-safe scanning tools (e.g., Claroty, Dragos, Nozomi, Tenable OT); triage findings with Control Systems Engineering and coordinate remediation or compensating controls.
Manage OT backup and disaster recovery processes: schedule and verify backups of SCADA configurations, historian archives, PLC/RTU programs, and HMI projects; perform periodic restoration testing.
Support industrial communication protocols including Modbus, DNP3, OPC-DA/OPC-UA, and EtherNet/IP; troubleshoot protocol-level issues between field devices, PLCs/RTUs, and SCADA hosts.
Administer remote access infrastructure for OT environments (e.g., jump servers, MFA-enforced VPN, cellular-based field communications) in compliance with OT remote access policy.
Coordinate with field operations and instrumentation technicians during planned maintenance windows, system outages, and emergency recovery activities to minimize impact to safe operations.
Maintain accurate and current OT asset inventories, network diagrams, configuration baselines, and change records in the designated CMDB or documentation platform.
Analyze recurring OT system incidents and reliability metrics; recommend and implement long-term corrective actions including hardware lifecycle planning and software version standardization.
Deliver training and procedural documentation to field operators, technicians, and junior IT staff on OT system operation, safe work practices within control rooms and substations, and relevant cybersecurity hygiene.
Participate in cross-functional initiatives including OT modernization projects, SCADA migrations, and IT/OT convergence programs, providing OT-specific technical input and implementation support.
Travel to pipeline, compression station, and processing facility locations to perform hands-on system administration, hardware replacement, and site audits — approximately 30–40% travel required.
Maintain confidentiality of operational data, control system configurations, and network topology in accordance with company policy and regulatory requirements.
Stay current with OT/ICS threat landscape, vendor advisories (ICS-CERT, vendor bulletins), and industry standards; participate in relevant professional associations and training (e.g., ISA, SANS ICS/SCADA courses).
Demonstrate commitment to company core values — Integrity, Ownership, Urgency, Alignment, and Innovation — in all daily responsibilities and interactions.
Actively support and contribute to the company’s mission and vision through reliable, high-quality work.