Network Engineer / Network Architect (OT / ICS – DOE Energy Sector)
Make an Impact in America’s Energy Future
Are you passionate about building secure, resilient networks that keep critical infrastructure running safely and reliably? Do you thrive in environments where precision, safety, and mission-driven engineering truly matter? If so, we want you on our team.
We’re looking for a talented Network Engineer / Network Architect to help modernize and secure Operational Technology (OT) and Industrial Control System (ICS) environments that support some of the nation’s most critical energy-sector operations. This is a chance to work at the crossroads of advanced engineering, cybersecurity, and national mission support—directly contributing to safe, efficient operations across nuclear, high‑voltage, and facility‑scale systems.
What You’ll Do
Design the OT Networks That Power Critical Operations
- Architect secure, segmented OT/ICS networks using the Purdue Model (Levels 0–3).
- Develop high‑availability, deterministic designs supporting SCADA, PLCs, DCS, historians, and real‑time automation.
- Implement secure vendor/remote access pathways aligned to cybersecurity frameworks.
- Build zoning, conduits, DMZs, and trusted data‑flow architectures for mission operations.
- Design and support industrial protocol environments (Modbus, DNP3, EtherNet/IP, OPC‑UA, Profinet, IEC 61850, BACnet).
Engineer, Deploy, and Operate OT Infrastructure
- Configure and maintain industrial‑grade switches, routers, firewalls, and ruggedized hardware.
- Support facility systems such as building automation, utilities, power systems, and nuclear/experimental equipment.
- Maintain diagrams, inventories, IP schemas, and documentation aligned with cybersecurity and configuration controls.
Advance OT Cybersecurity & DOE Compliance
- Apply NIST 800‑82, NIST 800‑53/171, and ISA/IEC 62443 security controls.
- Support DOE readiness activities, audits, and assessment documentation.
- Collaborate with Cybersecurity teams on firewall policies, monitoring, logging, and threat detection.
- Support vulnerability management while maintaining operational uptime in sensitive environments.
Automate, Monitor & Sustain Critical Systems
- Build automation workflows (Ansible/Python) where safe and appropriate.
- Integrate network health and security telemetry using approved OT monitoring platforms (Nozomi, Claroty, Splunk, SolarWinds, ELK/Grafana).
- Develop crisp documentation, change‑control packages, and incident response materials.
What You Bring
Required:
- 5–10+ years in network engineering/architecture, including 3+ years supporting OT/ICS in critical infrastructure.
- Experience with:
– SCADA, historians, PLC/DCS systems.
– Industrial protocols such as Modbus, DNP3, EtherNet/IP, OPC‑UA, Profinet.
– NIST 800‑82, NIST 800‑53/171, and related frameworks.
– Industrial network gear (Cisco IE/Stratix, Hirschmann, Moxa).
– OT firewall/DMZ architecture (Palo Alto, Fortinet, ASA).
- Experience in energy, utilities, nuclear, national labs, or similarly high‑security sectors.
- Strong collaboration with Controls, Facilities, Cybersecurity, and mission support partners.
Preferred:
- Certifications such as CCNP/CCIE, GICSP, ISA/IEC 62443, CISSP, PCNSE.
- Experience with OT cybersecurity platforms (Nozomi, Claroty, Dragos).
- Background supporting DOE or other highly regulated environments.
- Familiarity with cyber audits, readiness reviews, and facility safety/security protocols.
Work Environment
- On‑site role supporting plant‑floor and mission‑critical operations.
- Occasional 24/7 on‑call participation.
- Travel to facilities, secured areas, or plant locations as needed.
- PPE and safety training required.
- Must be eligible for Q or L clearance.
Success in This Role Looks Like
- More resilient, visible, and secure OT network operations.
- Successful execution of Purdue Model and 62443‑aligned segmentation.
- Clear, consistent configuration‑managed network baselines.
- Reduced OT network incidents and stronger facility support.
- Strengthened cybersecurity posture across mission‑critical systems.
In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.
This position will require a pre-employment background check and a pre-employment drug test.
Centrus Energy and all subsidiaries shall abide by the applicable legal requirements. We prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity or national origin.
This position requires the successful candidate to obtain and maintain a Q security clearance. Candidates for positions requiring a security clearance are required to be tested for the absence of any illegal drug as defined in 10 CFR 707.4 prior to an offer of employment being made. In addition, once employed, employees will become part of a random drug testing program and may also be tested in the event of any incident causing injury or causing damage to property, or if it is determined that there is a reasonable suspicion the employee is under the influence of drugs or alcohol. This position will require preemployment background check on the part of the Company and in order to receive a Q security clearance, a background investigation by the Federal government. Subsequent Federal government reinvestigations may be required.
Centrus Energy Corp. is an Equal Opportunity Employer
