Network Engineer, Sr. at Centrus Energy in Oak Ridge, TN

Job description

Network Engineer / Network Architect (OT / ICS – DOE Energy Sector) Make an Impact in America’s Energy Future Are you passionate about building secure, resilient networks that keep critical infrastructure running safely and reliably? Do you thrive in environments where precision, safety, and mission-driven engineering truly matter? If so, we want you on our team. We’re looking for a talented Network Engineer / Network Architect to help modernize and secure Operational Technology (OT) and Industrial Control System (ICS) environments that support some of the nation’s most critical energy-sector operations. This is a chance to work at the crossroads of advanced engineering, cybersecurity, and national mission support—directly contributing to safe, efficient operations across nuclear, high‑voltage, and facility‑scale systems. What You’ll Do Design the OT Networks That Power Critical Operations • Architect secure, segmented OT/ICS networks using the Purdue Model (Levels 0–3) • Develop high‑availability, deterministic designs supporting SCADA, PLCs, DCS, historians, and real‑time automation • Implement secure vendor/remote access pathways aligned to cybersecurity frameworks • Build zoning, conduits, DMZs, and trusted data‑flow architectures for mission operations • Design and support industrial protocol environments (Modbus, DNP3, EtherNet/IP, OPC‑UA, Profinet, IEC 61850, BACnet) Engineer, Deploy, and Operate OT Infrastructure • Configure and maintain industrial‑grade switches, routers, firewalls, and ruggedized hardware • Support facility systems such as building automation, utilities, power systems, and nuclear/experimental equipment • Maintain diagrams, inventories, IP schemas, and documentation aligned with cybersecurity and configuration controls Advance OT Cybersecurity & DOE Compliance • Apply NIST 800‑82, NIST 800‑53/171, and ISA/IEC 62443 security controls • Support DOE readiness activities, audits, and assessment documentation • Collaborate with Cybersecurity teams on firewall policies, monitoring, logging, and threat detection • Support vulnerability management while maintaining operational uptime in sensitive environments Automate, Monitor & Sustain Critical Systems • Build automation workflows (Ansible/Python) where safe and appropriate • Integrate network health and security telemetry using approved OT monitoring platforms (Nozomi, Claroty, Splunk, SolarWinds, ELK/Grafana) • Develop crisp documentation, change‑control packages, and incident response materials What You Bring Required 5–10+ years in network engineering/architecture, including 3+ years supporting OT/ICS in critical infrastructure Bachelor Degree in related field Experience with: – SCADA, historians, PLC/DCS systems – Industrial protocols such as Modbus, DNP3, EtherNet/IP, OPC‑UA, Profinet – NIST 800‑82, NIST 800‑53/171, and related frameworks – Industrial network gear (Cisco IE/Stratix, Hirschmann, Moxa) – OT firewall/DMZ architecture (Palo Alto, Fortinet, ASA) Experience in energy, utilities, nuclear, national labs, or similarly high‑security sectors Strong collaboration with Controls, Facilities, Cybersecurity, and mission support partners Preferred: • Certifications such as CCNP/CCIE, GICSP, ISA/IEC 62443, CISSP, PCNSE • Experience with OT cybersecurity platforms (Nozomi, Claroty, Dragos) • Background supporting DOE or other highly regulated environments • Familiarity with cyber audits, readiness reviews, and facility safety/security protocols Work Environment • On‑site role supporting plant‑floor and mission‑critical operations • Occasional 24/7 on‑call participation • Travel to facilities, secured areas, or plant locations as needed • PPE and safety training required • Must be eligible for Q or L clearance Success in This Role Looks Like • More resilient, visible, and secure OT network operations • Successful execution of Purdue Model and 62443‑aligned segmentation • Clear, consistent configuration‑managed network baselines • Reduced OT network incid