Network & Security Engineer - OT / Industrial Networks

With an experience of over 29 years, E-INFRA Group comprises 5 Romanian companies, active in the field of energy, constructions, and telecommunications infrastructure.

E-INFRA holding includes: Electrogrup, EPC contractor for complex projects in critical infrastructure for energy and renewable energy, construction and telecom projects, Nova Power and Gas active in energy production, energy and gas supply, natural gas distribution and energy and gas trading, Direct One, the operator of the largest neutral long distance fiber optic network with national coverage, maintenance services and telecom projects and WESEE, offering full installation and maintenance services for wind parks.

The main goal of the E-INFRA Group is to enhance the quality of life for individuals by providing modern cutting-edge infrastructure that supports a better future.

Role purpose:
We are looking for a Network & Security Engineer to design and build secure industrial network infrastructure for electrical substations, renewable energy and battery energy storage system (BESS) projects across Romania.
The role focuses on network architecture, detailed design and hands-on implementation in Operational Technology (OT) environments supporting SCADA and Substation Automation Systems (SAS).
You will translate project requirements into network designs, define equipment specifications, configure switches, routers and firewalls, and implement network segmentation and security controls.
Working closely with SCADA and automation engineers, you will cover the full project delivery cycle: design, configuration, integration, testing, on-site commissioning and technical handover to operations and maintenance teams.

Key responsibilities:

• Design industrial network architectures for HV/MV substations, renewable energy and BESS projects, including network topologies, IP addressing plans, VLANs, routing, multicast, QoS and redundancy.
• Define technical specifications for switches, routers, firewalls and network communication links based on project requirements.
• Configure and integrate industrial network equipment, including redundant architectures using RSTP, PRP and HSR.
• Design and implement network segmentation, access control lists (ACLs), firewall policies, VPNs and secure remote access.
• Implement cybersecurity measures, including next-generation firewalls (NGFW), IDS/IPS, role-based access control (RBAC), device hardening, logging and network monitoring.
• Engineer and validate network support for IEC 61850 and IEC 60870-5-104 communications, including MMS/GOOSE and multicast traffic, in collaboration with SCADA and automation engineers.
• Diagnose and resolve network performance, connectivity and security configuration issues during integration and commissioning.
• Prepare network architecture diagrams, detailed designs, configuration records, test procedures and as-built documentation.
• Perform Factory Acceptance Testing (FAT), Site Acceptance Testing (SAT) and on-site commissioning, and support technical handover to operations and maintenance teams.

Required Skills and Experience: 

• At least 3 years of hands-on experience designing and implementing network infrastructure, including routing, switching, firewalls and network security controls.
• Strong practical knowledge of Ethernet, TCP/IP, Layer 2/Layer 3 networking, VLANs, routing, ACLs, multicast and QoS/DSCP.
• Experience translating technical requirements into network designs, equipment specifications and implementation documentation.
• Hands-on experience configuring and troubleshooting industrial managed switches, routers and firewalls.
• Practical understanding of network segmentation, firewall policies, VPNs and secure remote access.
• Knowledge of industrial network redundancy, including RSTP, PRP and HSR.
• Good understanding of SCADA/SAS architectures and the network requirements of IEC 61850 and IEC 60870-5-104.
• Working knowledge of IEC 62443 and IEC 62351 and their application to industrial network design and security.
• Bachelor’s degree in Telecommunications, Computer Engineering, Cybersecurity, Electrical Engineering, Automation or a related field.
• Availability for project and on-site activities across Romania.

Nice to Have:

• Experience with Siemens RUGGEDCOM/SCALANCE, Fortinet, Cisco Industrial Ethernet, Hirschmann/Belden, Palo Alto, Moxa, Westermo or similar platforms.
• Experience delivering network and security infrastructure for electrical substations, renewable energy or BESS projects.
• Experience designing redundant fibre-optic networks.
• Familiarity with Siemens SICAM/SIPROTEC, ABB/Hitachi Energy MicroSCADA/Relion, GE or SEL systems.
• Relevant networking or OT cybersecurity certifications.