Senior Specialist Network Architect - OT/SCADA

ON.energy

Houston, TX

Full Time

Posted August 25, 2026

$123k - $175k· Est.

Energy Management

Apply Now

Application opens on company website

Listing evidence and provenance

Source: Greenhouse View original listing
Freshness: Open in the current public read path; this is not an employer guarantee.Last observed October 5, 2026
Classification: Modern power-system classification not yet published for this listing.Legacy source industry field: Energy Management
Pay provenance: Estimated benchmark; not employer-provided

Job Description

We're hiring a Senior Specialist, OT/SCADA Network Architect to be the in-house design authority on OT networks for our AI data center UPS projects.

Key Responsibilities

Architect the OT network
Develop the designs, analyze the options, and make the technical recommendations decisions are built on. The manager gives final approval; the design is your craft.
Refine the base design template: zoning model, IP and VLAN scheme, redundancy topology, equipment baseline and adapt it per project, flagging when a site genuinely needs to deviate rather than quietly forcing a fit.
Produce the design packages: L1/L2/L3 diagrams, IP and VLAN schedules, switching and routing configurations, port maps, and cable/fiber schedules.
Design heavily segmented, multi-zone networks: Purdue-aligned levels, DMZs, conduits between zones, along with the redundancy, QoS, and time synchronization (NTP/PTP/IRIG-B) that keep control traffic reliable.
Design site-to-site VPN connectivity into our cloud environment, secure remote access for our engineers and vendors, and out-of-band management.
Support design reviews and commissioning: network test plans, troubleshooting during energization, and as-builts. Document decisions clearly enough that project engineers and technicians can execute without re-deriving your reasoning.
Own the IT/OT boundary
Apply a clear model of IT/OT separation: where the boundary sits, what crosses it, and why.
Map dataflows end to end, from PCS, BMS, meters, and site SCADA through to our cloud environment and client-facing platforms.
Design the DMZ, gateway, and data-transfer patterns that get business systems the data they need without exposing control systems, and coordinate with IT and cloud teams on identity and remote access.
Guide vendor and equipment selection
Recommend network and infrastructure equipment: industrial switches, routers, firewalls, media converters, gateways, to include weighing environmental ratings, form factor, PoE budgets, protocol support, lifecycle, and spares. Present trade-offs, not a single answer.
Review vendor and OEM submittals against our base design, recommend how to close gaps, and support procurement with sizing justification and lead-time input.
Support spec compute and infrastructure (industrial and rack servers, virtualization sizing, storage, redundant power, UPS) and coordinate with electrical teams on panel layouts, enclosures, grounding, and surge protection.
Design with security in mind
Build in segmentation, least privilege, hardened baselines, and explicit trust boundaries between IT, OT, client, and vendor networks.
Contribute to industrial firewall design: zone-to-zone rule sets, OT protocol inspection where required and secure remote access patterns (jump hosts, MFA, SSO).
Apply IEC 62443 concepts in design decisions and support compliance and audit work with drawings and documentation.
Support asset inventory, network monitoring, and centralized logging so we can see what's on our networks.
Understand the protocols
Know the protocols in our stack: Modbus TCP/RTU, DNP3, IEC 61850, IEC 60870-5-104, OPC UA, MQTT, to include their bandwidth, timing, and segmentation implications, and how to troubleshoot them at the packet level.
Our controls and SCADA engineers own protocol configuration and point mapping. You don't need to own that layer, but you do need to speak the language and anticipate how design choices affect it.