Senior Network Engineer-OT

• Bachelor’s degree or equivalent education and experience
• 5+ years of experience managing computer networks in the OT energy sector (solar, battery storage, gas generation) and data center
• 5+ years of experience with Microsoft Azure networking, site-to-site connectivity, virtual networks, VPN gateways, cloud firewalls, and hybrid monitoring.
• Experience with Palo Alto Networks/Cisco routers, firewalls, and switches, Dell Servers, Hyper-V, VMWare, Kubernetes, Docker
• Current networking or security certifications such as CCNP/CCNA, PCNSE/PCNSA, GICSP, GRID, CISSP, or Security+.
• Familiarity with the NIST Cybersecurity Framework, NIST SP 800-82, ISA/IEC 62443, and NERC CIP applicability and compliance processes.
• Datacenter knowledge in Electric Power Management System (EPMS) and Building Management Systems (BMS) is a plus
• Broad experience across new solar technologies, energy storage, or application of artificial intelligence / machine learning to renewable energy.
• Demonstrated strong engineering, design, and communication skills, and an ability to work in a dynamic team environment to think outside the box and solve traditional problems in new ways.
• Self-starter with the ability to prioritize efforts and drive towards completion.
• Strong verbal, written, interpersonal and communication skills
• The position requires up to 10% domestic travel.

Location : Redwood City, CA; San Diego, CA; Denver, CO; Phoenix, AZ; Austin, TX

Base Pay -$100000-$140000

The pay range mentioned above is a guideline. We tailor each offer based on your unique skills, experience, location, and market benchmarks—while ensuring internal parity across our teams. The compensation range provided reflects base pay. Total rewards may also include performance-based bonuses, equity grants, and a market leading comprehensive health and wellness benefits package. Final details will be discussed during the later stages of the hiring process.

• Own the end-to-end OT network architecture from development and detailed design through construction, commissioning, operations, upgrades, and asset handover.
• Design resilient, segmented power plant and substation networks, including LAN/WAN, VLANs and VRFs, routing and switching, firewalls and DMZs, redundant paths, fiber and telecom circuits, wireless or cellular links, and secure cloud or remote operations connectivity.
• Find solutions for telecomm/fiber to remote sites utilizing wireless or satellite backup communications
• Create and maintain high- and low-level designs, network topology diagrams, IP address and VLAN plans, port/protocol matrices, firewall rule bases, equipment standards, bills of material, fiber schedules, test plans, and as-built records.
• Lead equipment selection, configuration standards, capacity planning, procurement support, factory/site acceptance testing, commissioning, failover testing, and operational handoff.
• Review EPC, OEM, integrator, and subcontractor designs and configurations; resolve technical gaps and verify that installations meet reliability, cybersecurity, schedule, budget, and supportability requirements.
• Embed defense-in-depth into OT network designs and operating practices, using risk-based principles aligned with company policy, NIST guidance for OT security, ISA/IEC 62443, and applicable NERC CIP requirements.
• Implement and govern security zones and conduits, firewall and access-control policies, industrial DMZs, allowlisted communications, least-privilege access, and documented separation between enterprise IT, site OT, vendor, and external networks.
• Secure interactive and vendor remote access through approved VPNs, multi-factor authentication, jump hosts or privileged access controls, time-bounded access, session accountability, and rapid revocation.
• Integrate network devices with centralized monitoring and security tooling, including health and performance monitoring, syslog/SIEM, time synchronization, configuration management, and OT-aware detection or network visibility platforms.
• Assess third-party equipment, connections, and support models for cybersecurity risk before deployment, and ensure vendors follow approved remote-access, change-control, and incident-notification requirements.
• Review network firmware updates and determine risk, impacts and implement updates
• Report project progress updates to key stakeholders

At SB Energy, we invest in our people and their families with benefits designed for flexibility, support, and peace of mind. Full-time employees enjoy:

• 100% Company-Paid Medical, Dental & Vision (for employees and dependents)
• 401(k) with Company Match
• Generous Paid Time Off + 11 Paid Holidays
• 12 Weeks Paid Parental Leave
• Life, AD&D & Long-Term Disability Coverage
• Flexible Spending Accounts (FSA) for Medical, Dependent Care, Transit & Parking (with company contributions)
• Mental, Physical & Social Wellness Support (with company contributions)
• Flexible Work Arrangements & Hybrid Office Setup Benefits
• Monthly Reimbursement for Phone, Internet & Data
• Optional Legal & Pet Insurance Plans
• Device Purchase Support

At SB Energy, the success of our projects is driven by a desire to see our projects benefit as many people as possible. We work to serve local communities through volunteering, fundraising, and much more. For example, we’re proud to support access and opportunity in engineering and clean energy through impactful mentorship programs and workforce training. When you join SB Energy, you can become a part of these efforts, collaborating with team members who share a vision of building a better future now!

To learn more about us, visit www.sbenergy.com.