OT Network Engineer

Are you ready to be part of a company that's not just talking about the future, but actively shaping it? Join The AES Corporation (NYSE: AES), a Fortune 500 company that's leading the charge in the global energy revolution. With operations spanning 14 countries, AES is committed to shaping a future through innovation and collaboration. Our dedication to innovation has earned us recognition as one of the Top Ten Best Workplaces for Innovators by Fast Company in 2022. And with our certification as a Great Place to Work, you can be confident that you're joining a company that values its people just as much as its groundbreaking ideas.

AES is proudly ranked #1 globally in renewable energy sales to corporations, and with $12.7B in revenues in 2023, we have the resources and expertise to make a significant impact as we provide electricity to 25 million customers worldwide. As the world moves towards a net-zero future, AES is committed to meeting the Paris Agreement's goals by 2050. Our innovative solutions, such as 24/7 carbon-free energy for data centers, are setting the pace for rapid, global decarbonization.

If you're ready to be part of a company that's not just adapting to change, but driving it, AES is the place for you. We're not just building a cleaner, more sustainable future - we're powering it. Apply now and energize your career with a true leader in the global energy transformation.

The OT Network Engineer is responsible for designing, deploying, and maintaining Cisco-based network infrastructure across AES US Renewables operational technology (OT) environments. This role ensures reliable, secure connectivity between data centers, substations, and field sites supporting renewable energy operations.

The position requires hands-on expertise in Cisco routing, switching, and firewall technologies, along with a strong understanding of SCADA network integration, IT/OT network segmentation, and cybersecurity compliance (e.g., NERC CIP). The engineer will collaborate across IT, OT, Cybersecurity, and Operations teams to deliver high-availability network services that support safe and efficient power generation.

Primary Responsibilities

Network Design & Deployment

• Design and deploy Cisco network infrastructure (routers, switches, and firewalls) across multiple renewable energy sites

• Configure and maintain Cisco Firepower/FTD firewalls and Cisco SD-WAN architecture

• Build and monitor IPsec/GRE tunnels between data centers, substations, and field devices

• Ensure high availability and redundancy across primary and secondary data centers

Site Connectivity & SCADA Integration

• Manage site connectivity including private circuits, LTE failover, and remote access solutions

• Support SCADA network integration and ensure proper segmentation between IT and OT networks

• Coordinate with vendors for network commissioning, circuit turn-up, and troubleshooting

Monitoring, Security & Compliance

• Implement network monitoring, logging, and alerting for uptime and security

• Assist in cybersecurity compliance activities (e.g., NERC CIP or company internal policies)

• Support controlled change management processes and scheduled maintenance windows

Documentation & Collaboration

• Maintain accurate network documentation, IP address plans, and device inventory

• Participate in infrastructure and compliance-related projects (e.g., network upgrades, site expansions, datacenter migrations)

• Communicate clearly with technical and non-technical stakeholders

Qualifications

Bachelor's Degree (Information Technology / Computer Science / Network Engineering) preferred or equivalent with relevant work experience required.

5+ years' experience to include:

• Cisco network engineering (routing, switching, and firewalls)

• Experience with Cisco Firepower/FTD, ASA, and SD-WAN platforms

• Strong knowledge of IPsec/GRE VPN tunnels, BGP, OSPF, and VLAN architecture, and routing protocols (BGP, OSPF, EIGRP).

• Familiarity with network monitoring tools (e.g., SolarWinds, PRTG, or similar)

• Solid grasp of firewall rules, security zones, and remote access configurations

• Experience working in regulated or compliance-driven environments

• Strong written and verbal communication skills

• Ability to work independently and manage multiple technical responsibilities

• Physical ability to lift and maintain 70 LBS for short period of time

• Ability to climb a ladder over 4 feet

• Have reliable transportation

• Able to travel up to 25% and in field environments during project commissioning and support remote site deployment.

Additional Qualifications

• Cisco certifications (CCNA, CCNP, or equivalent)

• Experience working with industrial communication protocols (Modbus, DNP3, IEC 61850)

• Experience supporting NERC CIP compliance in OT/ICS environments

• Familiarity with SCADA protocols and IT/OT convergence

• Experience with LTE/cellular failover and remote-access VPN solutions

• Knowledge of AES infrastructure standards and operational practices