We are looking for a Senior IT/OT Network Engineer.

Are you passionate about designing secure industrial networks, virtualization environments, and cybersecurity architectures for critical manufacturing operations? Join our team and play a key role in delivering cutting-edge Industrial Automation and Control Systems solutions.

The Senior IT/OT Network Engineer is responsible for designing, securing, virtualizing, and deploying Industrial Automation and Control Systems infrastructure for industrial clients throughout North America. This role provides direct engineering support for U.S. operations and requires travel for commissioning activities, network assessments, cybersecurity audits, and system handovers.

The idóneo candidate will bridge the gap between plant floor automation and enterprise IT infrastructure, applying industry-leading cybersecurity frameworks and best practices to ensure reliable and secure industrial operations.

Requirements

- Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, Telecommunications, Electronics, Automation Engineering, or a related Engineering discipline.
- 5+ years of experience in Network Engineering, IT/OT Infrastructure, or Industrial Automation environments.
- Minimum 3 years of hands-on experience supporting Operational Technology (OT) networks and industrial cybersecurity projects.
- Proven experience working within manufacturing, mining, energy, water/wastewater, food & beverage, and/or other industrial environments.
- Advanced English proficiency (C1 or higher).
- Ability and willingness to travel throughout the United States as required.
- Valid passport and eligibility to obtain a TN Visa.

Key Responsibilities
- Design and document resilient OT network architectures following the Purdue Model / ISA-95 and Cisco/Rockwell Converged Plantwide Ethernet (CPwE) standards.
- Configure, deploy, and troubleshoot Rockwell Stratix switches, Cisco Catalyst switches, routers, and firewall platforms.
- Architect, implement,



and maintain high-availability virtualization and hyperconverged infrastructures supporting SCADA systems, Historians, Industrial Application Servers, and Edge computing environments.
- Design and implement industrial DMZ (iDMZ) architectures, secure remote access platforms, VPNs, MFA solutions, and OT security gateways.
- Ensure reliable and deterministic industrial communications across EtherNet/IP, DLR, CIP Security, CIP Sync (IEEE 1588), PROFINET, and Modbus TCP networks.
- Architect, size, and deploy Industrial Data Centers (IDCs) and Edge micro data centers.
- Travel to customer facilities to support commissioning, network deployment, cybersecurity assessments, system integration, and startup activities.
- Lead advanced troubleshooting efforts related to network performance, latency, redundancy, broadcast storms, protocol diagnostics, and cybersecurity incidents.
- Support pre-sales and project development activities, including network assessments, technical proposals, BOM generation, and network diagram development.

Technical Requirements
- Strong knowledge of TCP/IP, Ethernet/IP, VLANs, Routing, Switching, ACLs, NAT, QoS, OSPF, BGP, and Layer 2/Layer 3 network architectures.
- Hands-on experience with Rockwell Automation network infrastructure, including Stratix switches and Device Level Ring (DLR) architectures.
- Experience with virtualization technologies such as VMware vSphere/ESXi, Hyper-V, Nutanix, or other hyperconverged platforms.
- Experience in design, layout, and deployment of Industrial Data Centers (IDCs) and Edge micro data center infrastructure.
- Knowledge of backup, disaster recovery, and high-availability strategies using platforms such as Veeam or Acronis.
- Experience configuring Cisco networking and security technologies,



including Catalyst switches, routers, and perimeter security devices.
- Practical implementation of industrial cybersecurity frameworks, including:
- ISA/IEC 62443
- NIST SP 800-82
- CPwE Security Architectures
- Defense-in-Depth Strategies
- Zones & Conduits Methodology
- Experience with industrial threat detection and OT monitoring platforms such as Claroty, Dragos, Cisco Cyber Vision, or Nozomi Networks.
- Industrial wireless networking experience, including Wi-Fi 6, ISA100.11a, and Private LTE/5G solutions.
- Knowledge of ThinManager architectures and fault-tolerant computing platforms such as Stratus.
- Familiarity with AutoCAD, Visio, and technical network documentation standards.

Certifications

Required

- Cisco CCNA (Enterprise, Routing & Switching, CyberOps, or equivalent)

Highly Preferred
- Cisco CCNP Enterprise or Security.
- VMware Certified Professional (VCP-DCV).
- ISA/IEC 62443 Cybersecurity Specialist or Expert.
- GICSP (Global Industrial Cybersecurity Professional).
- GCIP (GIAC Critical Infrastructure Protection).
- Rockwell Automation and/or Cisco CPwE specialized certifications and training..

Soft Skills
- Strong cross-functional collaboration skills and ability to work effectively with engineering teams across Mexico and the United States.
- Exceptional analytical and troubleshooting capabilities in mission-critical industrial environments.
- Client-facing communication skills with the ability to explain complex technical concepts to engineers, operations teams, and executive stakeholders.
- Self-motivated, organized, and capable of managing multiple projects in a fast-paced environment.
- Strong documentation and technical presentation skills.

If you are passionate about Industrial Networking, Cybersecurity, and Virtualization, and want to work on critical infrastructure projects that power modern industry, we'd love to hear from you. Apply today! Sueldo: $40,000.00 - $45,000.00 al mes

Lugar de trabajo: remoto híbrido en Hermosillo, Son.

📌 Senior IT/OT Network Engineer (Hermosillo)
🏢 ECN Automation
📍 Hermosillo