Unified IT Network Manager

Broan-NuTone•Hartford, WI

2d•Hybrid

About The Position

The Unified Network Manager (IT/OT) is responsible for the design, implementation, management, and maintenance of secure IT/OT network infrastructures across multiple business units, sites, and operating companies. This role focuses on bridging Information Technology (IT) and Operational Technology (OT) environments while adhering to the Purdue Model for Industrial Control Systems (ICS). Using Fortinet and Cisco technologies, the Manager will implement and maintain Madison Air network standards, enforce a Zero-Trust network architecture, oversee segmentation, manage patching, and ensure high availability for both corporate and production networks.

Requirements

Bachelor’s degree in Computer Science, Information Technology, or relevant experience in IT/OT Networking.
7+ years of experience in network administration, with at least 2 years focused on OT/industrial environments.
Strong hands-on experience with Fortinet solutions (FortiGate, FortiSwitch, FortiAP) and approved multi-vendor switching and routing platforms.
Experience implementing Madison Air network standards across multi-organization environments, including Fortinet-based network architecture, FortiSwitch switching, FortiAP access points, FortiGate firewalls, MDF/IDF architecture, in large and medium campus network designs.
Proven understanding of the Purdue Model for ICS security and ISA/IEC 62443 standards.
Experience implementing Zero-Trust network principles.
Experience managing enterprise phone systems, Microsoft Teams telephony migrations, public PBX reviews, OPEX budgets, vendor spend, and business approval processes.
Experience managing network operations, lifecycle planning, formal change management, capacity planning, WAN/SD-WAN services, network access controls, IPAM, configuration backups, vendor escalation, and operational reporting.
Deep understanding of modern cybersecurity threats to IT/OT environments.
Ability to prioritize tasks across multi-organization environments.
Ability to bridge communication between IT staff and industrial floor operators.
Ability to lead standards adoption, prioritize operational work, coordinate stakeholders, and drive disciplined execution across multi-organization environments.
Ability to lift, move, and mount networking equipment such as switches, access points, firewalls, rack-mounted hardware, and related infrastructure as required.
Willingness to obtain and maintain scissor lift certification to safely access and support network infrastructure in manufacturing, warehouse, and campus environments.

Nice To Haves

Fortinet NSE 4-7
Cisco CCNP/CCNA
GICSP (Global Industrial Cyber Security Professional)

Responsibilities

Design and deploy scalable, segmented, and secure networks following the OT Purdue Model (Levels 0-5), ensuring robust separation between corporate IT and manufacturing/production OT zones.
Implement and manage OT DMZs to safely regulate traffic between IT and OT environments.
Design and manage complex network architectures using Fortinet-based network architecture and approved multi-vendor switching and routing platforms while implementing Madison Air network standards.
Configure VLANs, port control, static routing, and dynamic addressing (DHCP/IoT DHCP) tailored for both IT and industrial assets.
Manage multi-organization implementation of Madison Air network standards, including Fortinet-based network architecture for FortiSwitch switching, FortiAP access points, FortiGate firewalls, MDF/IDF architecture, and large and medium campus network environments.
Implement a Zero-Trust network architecture, including strict access controls, micro-segmentation, and continuous authentication for users and devices.
Manage Fortinet firewall (FortiGate) policies, including IPSec/SSL VPNs, SD-WAN, and Intrusion Prevention Systems (IPS) across on-premises and cloud (Azure) environments.
Configure and maintain industrial wireless networks and access points with secure authentication.
Develop and execute patch management schedules for all network equipment (firewalls, switches, access points) to minimize downtime in OT environments.
Perform routine firmware upgrades and hardware replacements to meet industry security standards and manufacturer support requirements.
Utilize monitoring tools (e.g., FortiManager, FortiAnalyzer, Cisco Prime) for proactive health checks and incident response.
Manage enterprise phone systems, including call routing, carrier services, auto attendants, call queues, E911 coordination, operational support, vendor coordination, lifecycle planning, and alignment with Madison Air network and security standards.
Lead migration planning and execution for phone systems moving to Microsoft Teams telephony, ensuring business continuity, user readiness, and proper cutover support.
Review public PBX systems, carrier services, and related telephony infrastructure to identify risks, modernization opportunities, cost efficiencies, and compliance with enterprise standards.
Manage OPEX budget planning, spend tracking, vendor renewals, and required business approvals for network, telephony, and related infrastructure expenditures.
Oversee network operations, monitoring, alerting, incident response, availability, and performance management across enterprise, campus, and OT network environments.
Own lifecycle planning for network infrastructure, including standards compliance, refresh planning, hardware replacement, supportability, warranty status, and end-of-life remediation.
Ensure network changes follow formal change management processes, including risk assessment, implementation planning, rollback planning, business communication, and post-change validation.
Perform capacity planning for WAN, LAN, wireless, firewall, and campus network services to support business growth, production requirements, and modernization initiatives.
Manage WAN, SD-WAN, internet, VPN, and carrier connectivity services, including redundancy, resiliency, circuit performance, and vendor escalation.
Implement and manage network access controls, including port security, device authentication, 802.1X/NAC where applicable, and role-based segmentation.
Manage IP addressing, DNS, DHCP, subnet allocation, and IPAM processes across IT, OT, wireless, and campus environments.
Maintain configuration standards, backup processes, version control, and recovery procedures for firewalls, switches, wireless controllers, and related network systems.
Provide reporting on network availability, incidents, project progress, lifecycle risk, security posture, and budget performance.
Lead network infrastructure projects from planning through implementation, including scope definition, timelines, resource coordination, stakeholder communication, testing, and operational handoff.
Provide network support across multi-organization environments, ensuring Madison Air network standards and standard operating procedures are consistently implemented and maintained.
Create and maintain detailed, up-to-date network diagrams, configuration documentation, and disaster recovery plans.
Collaborate with automation engineers and IT teams to troubleshoot connectivity issues bridging IT and OT systems.