Operational Technology Security Engineer

Essential Duties and Responsibilities:

The OT Network and Security Engineer is responsible for designing, implementing, and maintaining secure and efficient networks and systems used in industrial control environments. This role involves ensuring OT systems' integrity, confidentiality, and availability while addressing network and security challenges specific to industrial settings.

• Design and deploy OT network infrastructure including routers, switches, and firewalls.
• Develop and maintain network diagrams and documentation.
• Ensure network configurations meet operational requirements and industry best practices.
• Implement and manage security measures for OT systems, including firewalls, IDS/IPS, and access controls.
• Develop and enforce security policies and procedures tailored to OT environments.
• Conduct regular vulnerability assessments and penetration testing.
• Monitor OT networks for potential threats and performance issues.
• Respond to and manage security incidents and breaches, coordinating with IT and other relevant teams.
• Conduct root cause analysis and implement corrective actions.
• Ensure OT systems comply with relevant industry standards and regulations (e.g., NIST, ISO, IEC).
• Provide technical support for OT network and security issues.
• Troubleshoot and resolve network and security incidents to minimize operational downtime.
• Work with vendors and service providers as needed to address technical issues.
•  Plan and execute the integration of new OT technologies and systems.
• Manage upgrades and patching of network and security components to maintain system integrity and performance.
• Provide training and guidance on OT security best practices to staff members.
• All other duties as assigned

Education and/or Work Experience Requirements:

• Bachelor’s degree in information security, Computer Science, Information Technology, or a related work experience instead of a degree. Relevant certifications (e.g., CISSP, CISA, GICSP, PCNSE) are highly desirable.
• Minimum 5 years of experience in network and security engineering, with a focus on OT environments.
• Proven experience with industrial control systems (ICS), SCADA systems, and network security protocols.
• Strong understanding of OT network architecture and industrial protocols (e.g., Modbus, DNP3, OPC).
• Proficiency in network security tools and practices, including firewalls, IDS/IPS, and VPNs.
• Experience with risk management and compliance standards relevant to OT.
• Excellent troubleshooting and problem-solving skills.
• Solid Experience with Palo Alto Networks product line. Specifically, Strata.
• Experience with SIEM/XDR tools (e.g., Wazuh).
• Strong analytical skills with attention to detail.
• Effective communication and interpersonal skills.
• Ability to work independently and as part of a team.
• High level of integrity and professionalism.

Working Conditions:

• Available to attend in-person office and field meetings as needed.
• Exposure to hazardous conditions, adverse weather, cramped conditions, and some heavy lifting.
• Occasional driving may be needed to travel to Kinetik plants and worksites.
• Will be working in an office environment with long periods of sitting at a desk and working on a computer
• Available outside of normal working hours as needed for business necessity 

Physical Requirements:

• Ability to safely and successfully perform the essential job functions consistent with the ADA, FMLA, and other federal, state, and local standards, including meeting qualitative and/or quantitative productivity standards.
• Ability to maintain regular, punctual attendance consistent with the ADA, FMLA and other federal, state, and local standards
• Ability to work effectively in all working conditions noted above.
• Subject to 24-hour call out 7 days per week and possible extended workdays.

Kinetik is an equal employment opportunity employer and does not discriminate against qualified applicants on the basis of actual or perceived race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law.