Generation OT Network Engineer (BHM or ATL)

The Generation OT Network Engineer designs, implements, commissions, and supports secure, reliable operational technology network infrastructure across Southern Company Generation facilities. The role supports new generation, renewable, battery storage, repower, and lifecycle projects while sustaining connectivity for existing plant operations.

General Job Responsibilities:

- Design standardized OT network architectures for control systems, SCADA, DCS, historians, relays, remote operations, and vendor systems.
- Engineer routing, switching, segmentation, firewalls, redundancy, secure remote access, and controlled data flows.
- Configure, install, test, and commission switches, routers, firewalls, and related equipment at generation sites.
- Support factory and site acceptance testing, cutovers, outages, equipment replacements, and project turnover.
- Troubleshoot outages and degraded communications using end-to-end packet, traffic, routing, switching, firewall, and protocol analysis.
- Execute changes through required planning, risk review, validation, rollback, documentation, and closure processes.
- Apply Generation cybersecurity requirements and applicable NERC CIP controls to OT network work.
- Maintain diagrams, IP records, firewall documentation, configurations, backups, inventories, reports, and lifecycle plans.
- Partner with plant personnel, project teams, cybersecurity, Technology Organization groups, engineering firms, OEMs, and vendors.
- Provide escalation support and participate in an after-hours or on-call rotation as assigned.

Job Requirements:

- Working knowledge of Ethernet, TCP/IP, subnetting, DNS, DHCP, VLANs, LAN/WAN design, routing, switching, VPNs, redundancy, and network security.
- Hands-on experience configuring and troubleshooting Cisco routing and switching platforms and enterprise or industrial firewalls.
- Experience with OSPF, BGP, and packet-analysis tools such as Wireshark.
- Ability to troubleshoot complete communication paths across network devices, servers, control systems, and secure data-transfer boundaries.
- Ability to read and develop network diagrams, rack layouts, and technical implementation documentation.
- Strong planning, analytical, documentation, communication, and customer-service skills.
- Ability to manage concurrent field, operational, and project priorities.

Competencies:

- Network architecture design and implementation.
- End-to-end network troubleshooting and protocol analysis.
- Change planning, risk review, validation, rollback, documentation, and closure.
- Technical documentation and configuration management.
- Cross-functional collaboration with plant personnel, project teams, cybersecurity groups, engineering firms, OEMs, and vendors.
- Customer service, communication, analytical thinking, and management of concurrent priorities.

Education & Experience:

- A bachelor's degree in Engineering, Computer Science, Information Systems, Networking, or a related technical field is preferred. An associate degree, relevant certifications, and directly applicable experience may be considered.
- Typically 3–5 years of progressively responsible network engineering or administration experience with switches, routers, and firewalls.
- Experience in OT, industrial control, SCADA, utility, power-generation, or critical-infrastructure environments is preferred.
- Experience with Palo Alto firewalls; DNP3, Modbus, OPC, ICCP, historian connectivity, data diodes, relays, or RTAC communications is preferred.
- Network automation or scripting experience for configuration, backup, validation, or reporting is preferred.
- Relevant Cisco, Palo Alto, networking, or cybersecurity certifications are preferred.

Additional Requirements:

- The successful candidate will reside in either Birmingham, AL or Atlanta, GA. Some relocation assistance may be available if you do not already live within a reasonable commute distance
- The successful candidate must be able to travel up to 25%, including overnight travel, and will be expected to work onsite a minimum of four days per week at their assigned work location.
- The successful candidate must provide escalation support and participate in an after-hours and on-call support rotation as needed.