Hiring: Staff Network Architect - OT/SCADA Company: ON.energy Location: Houston, TX Job Posted Time: 2026-09-16 15:17:34 Employment Type: Remote Target Skills & Keywords : Ansible, BGP, Python, SCADA, SOC 2, Turbo, VPC, VPN About the job Experience: •8+ years in network engineering and architecture, including 5+ years designing OT, ICS, or SCADA networks. This experience can be within energy, utilities, data centers or mission-critical facilities, oil & gas, water, or heavy industry. •Proven experience designing heavily segmented, multi-zone networks for large systems. Be ready to walk us through a zoning model you worked on, why the boundaries fell where they did, and what you'd change now. •Strong routing and switching: VLANs, trunking, L3 routing (OSPF/BGP/static), NAT, ACLs, spanning-tree and ring redundancy, and structured IP planning. •Site-to-site IPsec VPN design and troubleshooting, including tunnel routing, redundancy, and failover. •Clear grasp of IT/OT separation and dataflow design: DMZs, gateways, and why a control network isn't just another VLAN. Required Skills: •Develop the designs, analyze the options, and make the technical recommendations decisions are built on. The manager gives final approval; the design is your craft. •Refine the base design template: zoning model, IP and VLAN scheme, redundancy topology, equipment baseline and adapt it per project, flagging when a site genuinely needs to deviate rather than quietly forcing a fit. •Produce the design packages: L1/L2/L3 diagrams, IP and VLAN schedules, switching and routing configurations, port maps, and cable/fiber schedules. •Design heavily segmented, multi-zone networks: Purdue-aligned levels, DMZs, conduits between zones, along with the redundancy, QoS, and time synchronization (NTP/PTP/IRIG-B) that keep control traffic reliable. •Design site-to-site VPN connectivity into our cloud environment, secure remote access for our engineers and vendors, and out-of-band management. •Support design reviews and commissioning: network test plans, troubleshooting during energization, and as-builts. Document decisions clearly enough that project engineers and technicians can execute without re-deriving your reasoning. •Map dataflows end to end, from PCS, BMS, meters, and site SCADA through to our cloud environment and client-facing platforms. •Design the DMZ, gateway, and data-transfer patterns that get business systems the data they need without exposing control systems, and coordinate with IT and cloud teams on identity and remote access. Compensation: •Flexible work environment (work from home / hybrid options) •Competitive salary + annual performance-based bonus eligibility Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!