Job description

ON.energy is setting the standard for large load interconnection. ON’s patented AI UPS™ is a medium-voltage UPS that serves as a firewall, protecting the data center from the grid, and the grid from the data center. With multiple gigawatts currently under construction, we are enabling grid-safe data centers. ON.energy is seeking a Senior Network Engineer to design, secure, and maintain network infrastructure of Operational Technology (OT) environments. This role requires deep expertise across network topologies, troubleshooting, and security, with a strong preference for hands-on experience securing industrial control networks using Palo Alto firewalls and Moxa switches. KEY RESPONSIBILITIES Design, implement, and maintain OT network architectures, including LAN/WAN, wireless, and industrial network segments. Configure, manage, and troubleshoot Palo Alto next-generation firewalls to enforce network security policy and segmentation between OT zones. Deploy and maintain Moxa industrial switches and other ruggedized networking hardware in OT environments. Diagnose and resolve complex network issues across routing, switching, and security layers, minimizing downtime in production and industrial settings. Design and maintain VLAN structures, subnetting schemes, and IP addressing plans across OT networks. Configure and manage NAT, VPN tunnels, and site-to-site/remote access connectivity. Implement and maintain High Availability (HA) network designs to ensure resilience of critical infrastructure. Apply network security best practices, including segmentation, access control, monitoring, and hardening of OT networks. Collaborate with controls, automation, and cybersecurity teams to support integration of PLCs, SCADA systems, and industrial PCs onto the network. Document network designs, standard operating procedures, and change management records. REQUIRED QUALIFICATIONS Expert-level knowledge of network topologies and structured troubleshooting methodology. Strong hands-on proficiency with TCP/IP, VLANs, routing, switching, subnetting, and NAT. Demonstrated experience designing and supporting site-to-site and remote access VPNs. Solid understanding of network security principles and High Availability design. Experience working within Operational Technology (OT) environments and an understanding of IT/OT network segmentation. Bachelor's degree in a related field, or equivalent professional experience. PREFERRED QUALIFICATIONS Hands-on expertise with Palo Alto firewalls (policy configuration, App-ID, segmentation, VPN, and monitoring). Experience deploying and managing Moxa industrial switches. Familiarity with Siemens PLCs and industrial control system architectures. Experience with SEL (Schweitzer Engineering Laboratories) protective relay and communication devices. Experience networking and supporting Industrial PCs in production/OT environments. Familiarity with Ignition SCADA platform and its network/architecture requirements. Proficiency administering both Windows and Linux environments. Relevant certifications such as PCNSE, CCNA/CCNP, or similar are a plus. CORE TECHNICAL SKILLS Category Skills Networking Fundamentals TCP/IP, VLANs, Routing, Switching, Subnetting, NAT Security Palo Alto Firewalls, VPNs, Network Security, High Availability OT Hardware Moxa Switches, Siemens PLCs, SEL Devices, Industrial PCs Software/Platforms Ignition SCADA, Windows, Linux ON.energy is an equal opportunity employer. This job description is intended to convey information essential to understanding the scope of the role and is not exhaustive of all responsibilities, skills, or qualifications required. For US-based roles - What you’ll get: Competitive salary + annual performance-based bonus eligibility Medical, dental, and vision insurance 401(k) with company match Paid time off and company holidays For Mexico-based roles - What you’ll get: Competitive salary + annual performance bonus eligibility Christmas Bonus (Aguinaldo): 30 days Major medical expenses and life insurance Paid time off and holidays (per local policy) For all roles: Professional development and growth opportunities Opportunity to grow with a mission-driven team shaping the future of clean energy Equal Opportunity: ON.energy is committed to equal employment opportunity and to maintaining a work environment free of harassment, discrimination, or retaliation. Benefits vary by role and location and are subject to change. Agency Notice: ON.energy does not accept unsolicited resumes from staffing agencies, search firms, or third-party recruiters. Resumes submitted without a fully executed Master Services Agreement (MSA) and a written request from an authorized member of our Talent Acquisition team will be considered the property of ON.energy. No placement fees or compensation will be paid for unsolicited candidate submissions.

Requirements

Must-haves

Design, implement, and maintain OT network architectures, including LAN/WAN, wireless, and industrial network segments.
Configure, manage, and troubleshoot Palo Alto next-generation firewalls to enforce network security policy and segmentation between OT zones.
Deploy and maintain Moxa industrial switches and other ruggedized networking hardware in OT environments.
Diagnose and resolve complex network issues across routing, switching, and security layers, minimizing downtime in production and industrial settings.
Design and maintain VLAN structures, subnetting schemes, and IP addressing plans across OT networks.
Configure and manage NAT, VPN tunnels, and site-to-site/remote access connectivity.
Implement and maintain High Availability (HA) network designs to ensure resilience of critical infrastructure.
Apply network security best practices, including segmentation, access control, monitoring, and hardening of OT networks.
Collaborate with controls, automation, and cybersecurity teams to support integration of PLCs, SCADA systems, and industrial PCs onto the network.
Document network designs, standard operating procedures, and change management records.
Expert-level knowledge of network topologies and structured troubleshooting methodology.
Strong hands-on proficiency with TCP/IP, VLANs, routing, switching, subnetting, and NAT.
Demonstrated experience designing and supporting site-to-site and remote access VPNs.
Solid understanding of network security principles and High Availability design.
Experience working within Operational Technology (OT) environments and an understanding of IT/OT network segmentation.

Nice-to-haves

Hands-on expertise with Palo Alto firewalls (policy configuration, App-ID, segmentation, VPN, and monitoring).
Experience deploying and managing Moxa industrial switches.
Familiarity with Siemens PLCs and industrial control system architectures.
Experience with SEL (Schweitzer Engineering Laboratories) protective relay and communication devices.
Experience networking and supporting Industrial PCs in production/OT environments.
Familiarity with Ignition SCADA platform and its network/architecture requirements.
Proficiency administering both Windows and Linux environments.
Relevant certifications such as PCNSE, CCNA/CCNP, or similar are a plus.
Christmas Bonus (Aguinaldo): 30 days

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Professional Development