Network & Security Engineer – OT / Industrial Networks

Short company description

With an experience of over 28 years, E-INFRA Group comprises 5 Romanian companies, active in the field of energy, constructions, and telecommunications infrastructure.

E-INFRA holding includes: Electrogrup, EPC contractor for complex projects in critical infrastructure for energy and renewable energy, construction and telecom projects, Nova Power and Gas active in energy production, energy and gas supply, natural gas distribution and energy and gas trading, Netcity Telecom, a company that develops and operates the metropolitan fiber optic infrastructure in Bucharest, Direct One, the operator of the largest neutral long distance fiber optic network with national coverage, maintenance services and telecom projects and WESEE, offering full installation and maintenance services for wind parks.

The main goal of the E-INFRA Group is to enhance the quality of life for individuals by providing modern cutting-edge infrastructure that supports a better future.

Requirements

Required Skills and Experience:

At least 3 years of hands-on experience designing and implementing network infrastructure, including routing, switching, firewalls and network security controls.
Strong practical knowledge of Ethernet, TCP/IP, Layer 2/Layer 3 networking, VLANs, routing, ACLs, multicast and QoS/DSCP.
Experience translating technical requirements into network designs, equipment specifications and implementation documentation.
Hands-on experience configuring and troubleshooting industrial managed switches, routers and firewalls.
Practical understanding of network segmentation, firewall policies, VPNs and secure remote access.
Knowledge of industrial network redundancy, including RSTP, PRP and HSR.
Good understanding of SCADA/SAS architectures and the network requirements of IEC 61850 and IEC 60870-5-104.
Working knowledge of IEC 62443 and IEC 62351 and their application to industrial network design and security.
Bachelor’s degree in Telecommunications, Computer Engineering, Cybersecurity, Electrical Engineering, Automation or a related field.
Availability for project and on-site activities across Romania.

Nice to Have:

Experience with Siemens RUGGEDCOM/SCALANCE, Fortinet, Cisco Industrial Ethernet, Hirschmann/Belden, Palo Alto, Moxa, Westermo or similar platforms.
Experience delivering network and security infrastructure for electrical substations, renewable energy or BESS projects.
Experience designing redundant fibre-optic networks.
Familiarity with Siemens SICAM/SIPROTEC, ABB/Hitachi Energy MicroSCADA/Relion, GE or SEL systems.
Relevant networking or OT cybersecurity certifications

Responsibilities

Design industrial network architectures for HV/MV substations, renewable energy and BESS projects, including network topologies, IP addressing plans, VLANs, routing, multicast, QoS and redundancy.
Define technical specifications for switches, routers, firewalls and network communication links based on project requirements.
Configure and integrate industrial network equipment, including redundant architectures using RSTP, PRP and HSR.
Design and implement network segmentation, access control lists (ACLs), firewall policies, VPNs and secure remote access.
Implement cybersecurity measures, including next-generation firewalls (NGFW), IDS/IPS, role-based access control (RBAC), device hardening, logging and network monitoring.
Engineer and validate network support for IEC 61850 and IEC 60870-5-104 communications, including MMS/GOOSE and multicast traffic, in collaboration with SCADA and automation engineers.
Diagnose and resolve network performance, connectivity and security configuration issues during integration and commissioning.
Prepare network architecture diagrams, detailed designs, configuration records, test procedures and as-built documentation.
Perform Factory Acceptance Testing (FAT), Site Acceptance Testing (SAT) and on-site commissioning, and support technical handover to operations and maintenance teams.