Job description

Basic Function The OT Infrastructure Specialist supports fleet-wide Operational Technology (OT) infrastructure used to operate industrial control systems across HF Sinclair sites. This position provides technical administration, troubleshooting, lifecycle support, documentation, backup and recovery, patch implementation, and project support for OT servers, endpoints, virtualization, networks, firewalls, and industrial control system infrastructure. The role reports to the OT Infrastructure & Cybersecurity Lead and coordinates closely with the OT Cyber Analyst, regional support teams, site OT teams, IT, vendors, and site stakeholders. Job Duties (functions considered essential as defined by ADA) • Administer, maintain, and support Operational Technology (OT) infrastructure systems across fleet locations, including servers, virtualization platforms, network devices, industrial firewalls, endpoint platforms, backups, and supporting services. • Provide advisory and hands-on technical support, as appropriate, for OT infrastructure associated with Honeywell Experion PKS/FTE, Foxboro ICS, Siemens ICS, and other Industrial Automation and Control Systems (IACS) environments, including centrally managed platforms, approved fleet standards, escalated site support, and infrastructure lifecycle activities. • Assist with implementation, configuration, and lifecycle management of OT infrastructure standards, including system hardening, configuration baselines, patching, backup schedules, and disaster recovery procedures. • Deployment, configuration, lifecycle management, administration, and ongoing support of centrally managed OT infrastructure platforms and fleet-wide support tools and applications used across supported OT environments. • Coordinate with refinery operations, maintenance, reliability, OT, IT, vendors, and contractors to support safe and reliable OT system operation. • Maintain and improve OT infrastructure asset records, network documentation, system diagrams, configuration records, backup records, and infrastructure support documentation. Support efforts to ensure centrally managed OT assets and support platforms are accurately documented, visible, and supportable through approved fleet tools and reporting processes. • Perform or coordinate approved OT infrastructure maintenance activities in accordance with change management, management of change, and site operating procedures. • Support the implementation of security updates, operating system patches, application patches, and firmware updates for OT systems where validated and approved by the business. • Monitor OT infrastructure health, availability, capacity, and performance; troubleshoot hardware, operating system, virtualization, network, and communication issues. • Support incident response activities by providing technical analysis, system recovery assistance, log collection, and infrastructure restoration support. • Assist with vulnerability remediation and corrective action activities identified by the OT Cybersecurity Analyst, OT Cybersecurity Specialist, audit findings, or risk assessments. • Participate in technical and non-technical projects requiring OT infrastructure support and cybersecurity oversight to ensure standards, policies, procedures, and site requirements are followed. • Support vendor access coordination and vendor maintenance activities in accordance with company remote access, cybersecurity, and safety requirements. • Provide fleet guidance and technical support for OT infrastructure reliability, availability, backup, patching, and lifecycle practices. • Maintain familiarity with ISA/IEC 62443 concepts related to zones and conduits, asset management, system hardening, patch management, backup and recovery, and secure maintenance of IACS environments. Special assignments or tasks assigned to the employee by their supervisor, as determined from time to time in their sole and complete discretion. Experience • At least 4 to 7 years of related experience in OT infrastructure, industrial control systems, process control systems, network administration, systems administration, or a combination of equivalent experience. • Experience supporting industrial control system environments, preferably Honeywell Experion PKS/FTE, Foxboro ICS, Siemens ICS, or similar distributed control system platforms. • Knowledge of Windows Server, endpoint operating systems, virtualization, Active Directory integration, backup and restore methods, networking, firewalls, and industrial Ethernet communications. • Experience supporting infrastructure in a refinery, pipeline, chemical, manufacturing, utility, or other industrial environment preferred. • Working knowledge of cybersecurity concepts as applied to OT environments, including system hardening, least privilege, change control, remote access control, patch management, vulnerability remediation, and incident response support. • Working knowledge of ISA/IEC 62443 principles preferred, especially as they relate to Industrial Automation and Control Systems (IACS), zones and conduits, secure system maintenance, and defense-in-depth. • Experience coordinating work with operations, maintenance, engineering, IT, vendors, and site leadership. • Ability to work calmly under pressure during system outages, abnormal operating conditions, or cybersecurity events. • Possesses effective communication skills and the ability to explain technical issues to both technical and non-technical audiences. • Acts with integrity, takes pride in work, demonstrates ownership, and seeks continuous improvement. Education Level A minimum of a bachelor’s degree in computer science, information systems, engineering technology, industrial technology, cybersecurity, management information systems, or related fields is preferred. Equivalent OT infrastructure, control systems, military, technical, or industrial experience may be considered in lieu of degree requirements. Required Skills • 4-7 years of related OT infrastructure, industrial networking, systems administration, or control systems support experience required. • ISA/IEC 62443 Cybersecurity Fundamentals, CompTIA Security+, Network+, Server+, Microsoft, VMware, Cisco, Fortinet, Palo Alto, Honeywell, Foxboro, or Siemens certifications are a plus. • Familiarity with Honeywell Experion PKS/FTE, Foxboro ICS, Siemens ICS environments, or similar control system infrastructure preferred. • Knowledge of Windows Server, virtualization, endpoint administration, backups, networking, industrial firewalls, switches, and remote access technologies. • Ability to support fleet-wide sites with up to 40% travel by land or air. Supervisory/Managerial Responsibility Requires working closely with internal leadership teams, outside engineering firms, other companies, and in some case governmental agencies. No direct supervision is required: ability to lead cross functional teams is required. Work Conditions Office based with up to 40% of travel by land or air is required. Subject to all weather and varying road conditions. Occasional long hours, as well as nights and weekends, may be required to support maintenance windows, outages, cybersecurity events, and site project activities. Benefits HF Sinclair offers a comprehensive benefits package designed to support the well-being of our employees and their families. Our benefits include, but are not limited to, the following: • Medical Insurance • Vision Insurance • Dental Insurance • Paid Time-Off • 401(k) Retirement Plan with match • Educational Reimbursement • Parental Bonding Time • Employee Discounts We are committed to fostering a supportive and inclusive work environment, ensuring our employees have the resources needed to thrive professionally and personally. Benefit eligibility is governed by official plan documents, for more details visit Total Rewards . Physical Requirements Job conditions require sitting, talking or hearing, making visual inspections, making precise hand and finger movements, perceiving color difference, and the ability to operate and drive assigned company vehicles at company standard insurance rates. A valid State driver’s license and proof of insurance are required. Job conditions may require standing, walking, twisting, stooping, crouching, kneeling, reaching or grasping, lifting and/or carrying up to 25 lbs. Our One HF Sinclair Culture: At HF Sinclair, we are united through our One HF Sinclair Culture, which is underpinned by our five core values of Safety, Integrity, Teamwork, Ownership and Inclusion. Developed to empower our people, our five core cultural values are at the heart of everything we do and extend to how we engage our stakeholders. These values influence our decisions, shape our behaviors and keep us connected across the entire organization. We maintain a true Safety culture for our employees, communities, environments and customers. Our goal is to make sure everyone returns home safely each day. We have a long-standing commitment to Integrity and ethical behavior and do what is right for our employees, investors, communities and the environment. We encourage employees to Step Up and Stand Out by championing a culture of Teamwork and Ownership. We foster a culture of Inclusion by encouraging diversity of experiences, viewpoints and backgrounds. What makes each of us different, together makes us stronger. About HF Sinclair Corporation HF Sinclair Corporation, headquartered in Dallas, Texas, is an independent energy company that produces and markets high-value light products such as gasoline, diesel fuel, jet fuel, renewable diesel and lubricants and specialty products. HF Sinclair owns and operates refineries located in Kansas, Oklahoma, New Mexico, Wyoming, Washington and Utah. HF Sinclair provides petroleum product and crude oil transportation, terminalling, storage and throughput services to our refineries and the petroleum industry. HF Sinclair markets its refined products principally in the Southwest U.S., the Rocky Mountains extending into the Pacic Northwest and in other neighboring Plains states and supplies high quality fuels to more than 1,750 branded stations and licenses the use of the Sinclair brand to more than 350 additional locations throughout the country. HF Sinclair produces renewable diesel at two of its facilities in Wyoming and also at its facility in New Mexico. In addition, subsidiaries of HF Sinclair produce and market base oils and other specialized lubricants in the U.S., Canada and the Netherlands, and export products to more than 80 countries. Equal Opportunity Employer HF Sinclair Corporation is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status or any other prohibited ground of discrimination.

Requirements

Must-haves

Basic Function
(functions considered essential as defined by ADA)
Assist with implementation, configuration, and lifecycle management of OT infrastructure standards, including system hardening, configuration baselines, patching, backup schedules, and disaster recovery procedures.
Deployment, configuration, lifecycle management, administration, and ongoing support of centrally managed OT infrastructure platforms and fleet-wide support tools and applications used across supported OT environments.
Coordinate with refinery operations, maintenance, reliability, OT, IT, vendors, and contractors to support safe and reliable OT system operation.
Perform or coordinate approved OT infrastructure maintenance activities in accordance with change management, management of change, and site operating procedures.
Support the implementation of security updates, operating system patches, application patches, and firmware updates for OT systems where validated and approved by the business.
Monitor OT infrastructure health, availability, capacity, and performance; troubleshoot hardware, operating system, virtualization, network, and communication issues.
Support incident response activities by providing technical analysis, system recovery assistance, log collection, and infrastructure restoration support.
Assist with vulnerability remediation and corrective action activities identified by the OT Cybersecurity Analyst, OT Cybersecurity Specialist, audit findings, or risk assessments.
Participate in technical and non-technical projects requiring OT infrastructure support and cybersecurity oversight to ensure standards, policies, procedures, and site requirements are followed.
Support vendor access coordination and vendor maintenance activities in accordance with company remote access, cybersecurity, and safety requirements.
Provide fleet guidance and technical support for OT infrastructure reliability, availability, backup, patching, and lifecycle practices.
Maintain familiarity with ISA/IEC 62443 concepts related to zones and conduits, asset management, system hardening, patch management, backup and recovery, and secure maintenance of IACS environments.
Special assignments or tasks assigned to the employee by their supervisor, as determined from time to time in their sole and complete discretion.
At least 4 to 7 years of related experience in OT infrastructure, industrial control systems, process control systems, network administration, systems administration, or a combination of equivalent experience.
Experience supporting industrial control system environments, preferably Honeywell Experion PKS/FTE, Foxboro ICS, Siemens ICS, or similar distributed control system platforms.
Knowledge of Windows Server, endpoint operating systems, virtualization, Active Directory integration, backup and restore methods, networking, firewalls, and industrial Ethernet communications.
Experience coordinating work with operations, maintenance, engineering, IT, vendors, and site leadership.
Ability to work calmly under pressure during system outages, abnormal operating conditions, or cybersecurity events.

Nice-to-haves

Experience supporting infrastructure in a refinery, pipeline, chemical, manufacturing, utility, or other industrial environment preferred.
Working knowledge of ISA/IEC 62443 principles preferred, especially as they relate to Industrial Automation and Control Systems (IACS), zones and conduits, secure system maintenance, and defense-in-depth.
ISA/IEC 62443 Cybersecurity Fundamentals, CompTIA Security+, Network+, Server+, Microsoft, VMware, Cisco, Fortinet, Palo Alto, Honeywell, Foxboro, or Siemens certifications are a plus.
Familiarity with Honeywell Experion PKS/FTE, Foxboro ICS, Siemens ICS environments, or similar control system infrastructure preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: career-feeds
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)