Network Security Engineer - Operational Technology (OT)

BCforward is currently seeking a highly motivated Network Security Engineer

Position Title: Network Security Engineer

Location: Nationwide Travel (USA-based)

Anticipated Start Date: ASAP

Please note this is the target date and is subject to change. BCForward will send official notice ahead of a confirmed start date.

Expected Duration: 6+ months with possibilities for extension

Job Type: Contract: 40 hrs/week

Job Description:

Job Role: Contract Network Security Engineer – Operational Technology (OT)

Location: Nationwide Travel (USA-based)

Contract Type: 6+ months with possibilities for extension

Position Summary:

We are seeking experienced Network Security Engineers to join a specialized OT Security team led by the Client. This team will be responsible for enhancing cybersecurity across multiple Operational Technology (OT) sites throughout the United States. The role focuses on implementing robust security controls aligned with IEC 62443 and NIST standards for cyber-physical systems.

Key Responsibilities:

As part of the OT Security team, the Network Security Engineers will:

• Travel to multiple OT sites across the U.S. to perform hands-on security implementations.
• Implement and configure Cisco Firepower appliances (transparent and routed modes) to achieve OT network segmentation and system isolation.
• Replace unmanaged OT switches identified during site walk-throughs with Meraki switches, and configure them for logical VLAN segmentation.
• Configure and troubleshoot OT traffic flows to ensure secure and efficient communication across segmented networks.
• Assist with rack-and-stack activities, supporting Client field services personnel during hardware deployment.
• In some cases, assist with the replacement of Access Points (APs) as part of site upgrades.
• Collaborate with site personnel and internal teams to ensure smooth deployment and minimal operational disruption.
• Document configurations, site findings, and implementation details in technical reports.
• Validate failover using SD-WAN and Cisco Firepower

Required Qualifications:

• Strong hands-on experience with:
• Cisco Firepower appliances (transparent and routed modes)
• Meraki switches for VLAN segmentation
• VeloCloud SD-WAN integration
• Familiarity with IEC 62443 and NIST Cybersecurity Framework for OT environments.
• Experience in OT environments such as manufacturing, utilities, or critical infrastructure.
• Ability to travel extensively across the U.S. (up to 90%).
• Excellent troubleshooting, documentation, and communication skills.
• Ability to work independently and as part of a distributed team.

Preferred Qualifications:

• Relevant certifications: CISSP, GICSP, Cisco Security, or ISA/IEC 62443.
• Experience with wireless infrastructure and AP deployments.
• Familiarity with physical security controls in industrial environments.

Work Environment:

• Field-based role with travel to industrial and operational sites.
• May involve working in environments with heavy machinery, electrical systems, and other industrial hazards (appropriate safety training and PPE provided).