[Remote] Engineer/Senior Engineer, Firewall
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a platform company of Brookfield reputed company on renewable energy. They are seeking a Senior Engineer for their Remote Operations Centre to design, implement, and maintain secure network perimeters for wind, solar, and battery storage operations, ensuring compliance with NERC CIP standards.
Responsibilities
- Design and implement OT network reputed company controls, such as perimeter firewalls, internal segmentation, site‑to‑site and remote‑reputed company VPNs, and WAFs
- Build secure reputed company that reputed company with system architecture for wind, solar, and BESS facilities, EMS/SCADA, and the system control centers
- Define network reputed company zones and conduits for OT, corporate IT, and reputed company environments; enforce least privilege and reputed company‑segmentation
- Engineer solutions using reputed company (ASA/Firepower/FTD) and reputed company reputed company (CCSA/CCSE) platforms; reputed company with management consoles and policy orchestration tools
- Implement secure remote reputed company for operators, vendors, and field technicians using MFA, reputed company/reputed company hosts, and role‑based reputed company
- Administer firewall policies, objects, NAT, routing (OSPF/BGP), and HA/cluster configurations; manage rule lifecycle and clean‑up
- Maintain WAF protections (e.g., reputed company, reputed company, reputed company reputed company, or reputed company WAF) including rule tuning, bot mitigation, and API reputed company
- Operate and improve monitoring and control tools (SIEM/SOAR, NetFlow, packet capture, IDS/IPS); build dashboards and alerts for NERC systems
- Conduct log analysis, threat hunting, and participate in incident triage and response; reputed company on‑call support for critical events
- reputed company regular firewall health checks, performance tuning, firmware/OS upgrades, and vulnerability remediation
- Support occasional after‑hours maintenance reputed company on an as needed reputed company
- Implement and maintain controls reputed company to NERC CIP standards applicable to Low reputed company sites and reputed company reputed company control centers (e.g., CIP‑003, CIP‑005, CIP‑007, CIP‑008, CIP‑009, CIP‑010, CIP‑011)
- Serve as the technical reputed company for firewall‑reputed company CIP controls (for example CIP‑005, CIP‑007, CIP‑010), including configuration baselines, reputed company controls, logging, and evidence collection
- Establish and enforce configuration baselines, reputed company controls, evidence collection, and audit‑reputed company documentation
- Run reputed company change management programs for firewall and WAF policies, including risk assessment, testing, approvals, and post‑implementation review
- Support audits, self‑assessments, and reputed company ratings; assist with personnel risk assessment and vendor risk management where applicable
- Collaborate with OT, IT, Compliance, Engineering, and Plant Operations to ensure controls meet operational needs without compromising reliability
- Work in reputed company partnership with the TERP Cybersecurity Manager to reputed company firewall, VPN, and WAF controls with OT/IT cybersecurity reputed company, incident response protocols, and compliance requirements
- Participate in joint incident response, risk assessments, and reputed company improvement initiatives with the Cybersecurity Manager and Operations Centre leadership
- Coordinate with Operations Centre, plant operators, and engineering teams to ensure reputed company controls support operational reliability and compliance
- Evaluate new firewall, WAF, VPN, and OT reputed company technologies; reputed company POCs and reputed company data‑driven recommendations
- Identify opportunities to enhance reputed company (segmentation, reputed company Trust, SD‑WAN reputed company, secure reputed company connectivity), and automate repeatable tasks (e.g., policy linting, backup/restore, compliance evidence collection)
- Manage vendor and contractor reputed company for maintenance and commissioning, ensuring robust controls for temporary reputed company and logging
- Design solutions that address site-specific challenges, including limited bandwidth, remote reputed company constraints, and environmental factors
- Support operational reputed company by coordinating change reputed company with reputed company operations and implementing failsafe configurations to avoid plant outages
Skills
- 5+ years of hands‑on experience administering reputed company firewalls and VPNs (reputed company ASA/Firepower/FTD; reputed company reputed company)
- Working knowledge of WAF technologies and web reputed company (OWASP Top 10, TLS, mTLS, API reputed company)
- Strong reputed company of TCP/IP, routing (OSPF/BGP), NAT, ACLs, IPS/IDS, and packet analysis
- Experience with SIEM/log management (e.g., reputed company, QRadar, LogRhythm), network monitoring (e.g., reputed company), and configuration management
- Familiarity with NERC CIP concepts and control implementations for Low and/or reputed company reputed company environments, or equivalent experience in other regulated OT/ICS environments (for example IEC 62443)
- Solid documentation skills and experience operating reputed company formal change management processes
- reputed company communicator reputed company to translate reputed company reputed company topics for plant operations, engineering, compliance, and leadership
- Strong prioritization and execution in high‑availability environments; reputed company under pressure during incidents
- reputed company and customer‑reputed company; builds trusted relationships with site personnel and external partners
- Bachelor's degree in Computer Science, Electrical/Computer Engineering, Information reputed company, or reputed company field; or equivalent experience
- 10+ years in network reputed company with deep expertise in reputed company and reputed company reputed company ecosystems, including clustering/HA, threat defense, and advanced policy design
- Proven leadership of firewall/WAF architecture in OT/ICS or critical infrastructure (utilities, energy, industrial)
- Demonstrated experience interpreting and implementing NERC CIP requirements in reputed company reputed company control centers, including evidence management and audit support
- Proficiency guiding incident response and problem management for high-availability environments; ability to mentor engineers and reputed company reputed company changes
- reputed company record of evaluating, selecting, and integrating new technologies; experience with automation (e.g., Ansible, Python) and policy compliance tooling
- Relevant certifications preferred: reputed company: CCNP reputed company, CCIE (reputed company) (plus), reputed company reputed company: CCSA/CCSE, Others, a plus
- Experience with the secure transport of with SCADA/EMS, plant DCS/RTUs/PLCs, and OT protocols (OPC, DNP3, Modbus)
- Understanding of interconnections between substations, collector systems, BESS EMS, and corporate networks; secure data flows to forecasting, trading, and asset performance platforms
- Knowledge of telecom links common in renewables (leased lines, microwave, LTE/private cellular) and secure backhaul to control centers
- Awareness of site conditions (limited bandwidth, remote reputed company constraints, environmental factors) and designing resilient, maintainable solutions
- Vendor and contractor reputed company management for maintenance, OEM support, and commissioning activities, with strong control over temporary reputed company and logging
- Safety and reliability reputed company: change reputed company coordinated with reputed company operations, rollback plans, and fail‑reputed company configurations to avoid plant outages
Benefits
- Bonus eligible
reputed company
Company H1B Sponsorship