Senior OT Systems Engineer

Job Description

Position Summary
Acts as a technical expert for the Operations Technology (OT) engineering team who performs the engineering, configuration and deployment of the network and virtual server infrastructure that supports the organization's OT environment.  Responsible for the security, reliability, and performance of the OT environment to ensure the safe and reliable delivery of natural gas.  This position will utilize multidiscipline knowledge of and experience in network infrastructure (enterprise grade and industrial grade firewalls, switches, and routers), virtual server infrastructure, cyber security tools and technologies, identity access management systems, OT software applications, operating systems, wireless communications (private radio, spread spectrum, LTE), and OT devices (PLCs, RTUs).  The ideal candidate would have extensive experience as a network engineer and virtualization engineer for the oil and gas industry.  Must be available to serve on-call on a rotating 24 hours a day, 7 days a week schedule.

Tasks and Responsibilities
• Engineers, deploys and maintains network and virtual server infrastructure for remote control and monitoring of natural gas pipeline facilities.
• Performs system and equipment deployments and upgrades on network and virtual server infrastructure projects while ensuring no disruptions to the ability to control and monitor the natural gas pipeline.
• Performs project management functions on network and virtual server infrastructure projects, including coordinating resources from different departments.
• Assists in meeting compliance with TSA and public service commission (PSC) regulatory requirements.
• Uses detailed understanding of OT device protocols (e.g. Modbus, DNP3) and the Purdue Model for ICS networks to architect, deploy and maintain securely segmented network infrastructure for communications between Critical Cyber Systems.
• Collaborates with engineering and operations teams to identify requirements and specifications for external projects that require additions or changes to the OT environment.
• Collaborates with engineering and operations teams to ensure internal projects do not interrupt critical pipeline operations.
• Uses detailed understanding of the OT environment and operations requirements to troubleshoot and resolve OT application issues, computing and network equipment failures and communications outages within specified time limits.
• Architects and deploys test environments for testing of software updates and patches.
• Tests and deploys patches and software updates for all types of OT infrastructure including operating systems, network equipment, virtual infrastructure, and PLCs while ensuring no disruption of critical operations using a continuously evaluated risk-based methodology.
• Deploys and manages identity access management systems for controlling access to network devices and other OT applications and systems.
• Performs administration, configuration, installation, and deployment of network equipment including firewalls, routers, and switches.
• Collaborates with vendors to identify and procure equipment and systems and to troubleshoot and resolve problems.
• Specifies, procures, and manages installation of network and virtual infrastructure components.
• Specifies, procures, and manages installation of physical communications media (e.g. fiber, CAT5/6) for inside plant and outside plant applications through conduit or raceways.
• Develops and maintains firewall policies to meet CISA and TSA-SD2 guidelines and requirements.
• Develops and maintains system documentation including run books, asset inventories, and network diagrams.
• Serves as an OT subject matter expert for communications with internal and external stakeholders including TSA and PSC regulatory inspectors.
• Evaluates equipment lifecycles and develops replacement schedules and cost estimates.
• Evaluates and deploys new technologies to continuously improve the security and reliability of the OT environment.
• Uses in-depth knowledge of operational requirements, communication infrastructure and information systems to discover and evaluate risks due to system vulnerabilities and implement mitigation measures within the OT environment.
• Develops and maintains cyber policies and procedures to meet compliance with TSA and PSC cybersecurity requirements.
• Performs risk assessments and penetration tests within the OT environment.
• Collaborates with internal supply chain teams to ensure vendor agreements meet TSA and PSC cybersecurity requirements.
• .

Qualifications, Skills and Abilities
• Bachelor's Degree Electrical Engineering, Computer Science, Information Systems or related field  required
• 5+ Years  with enterprise and industrial grade network infrastructure is required required
• 1+ Years of experience with server virtualization is preferred.
•  Demonstrated experience working on systems within an ICS/OT environment required.
•  Strong knowledge of networking concepts such as VLANs, network segmentation, and routing required.
•  Demonstrated experience troubleshooting networks at all layers of the OSI model required.
•  Strong knowledge of the Purdue Model for ICS networks preferred.
•  Demonstrated experience deploying and configuring network equipment including firewalls, switches and routers required.
•  Experience installing, deploying, and configuring virtual machines, hypervisors and bare metal servers is preferred.
•  Knowledge of process control, electronic, pneumatic and mechanical instrumentation systems preferred.
•  Experience working with federal and state regulatory agencies preferred.
•  Experience installing and programming PLCs/RTUs preferred.
•  Experience working with vulnerability and network scanning tools preferred.
•  Strong knowledge of network communications media including fiber and CAT5/6 required.
•  Ability to learn through instructor led training and self-study required.
•  Ability to write technical documentation required.
•  Ability to communicate fluently in written and verbal English required.

We offer a competitive salary range of $94,000 to $136,000 per year, commensurate with experience, education, and skills. In addition, we provide a comprehensive benefits package including health insurance, retirement plans, and paid time off.

The Company values diversity in its workforce and encourages United States military veterans and service members who meet the qualifications to apply 

Why work at AltaGas?

AltaGas is a North American energy infrastructure company with a focus on owning and operating assets that provides affordable energy to our customers. AltaGas assets include Washington Gas/WGL, SEMCO, and Petrogas. Our talented team, nearly 3,000 strong, leverages the strength of our assets and expertise along the energy value chain to connect customers with premier energy solutions – from the well sites of upstream producers to the doorsteps of homes and businesses to new markets around the world.

We deliver clean affordable natural gas to approximately 1.7 million customers’ homes and businesses through regulated natural gas distribution utilities across four jurisdictions in the United States and two regulated natural gas storage utilities in the United States. Learn more about our team, vision, and strategy.

To learn more about our mission: https://youtu.be/k1mrKDdsYW8?si=y1k3NOyHxgf4emdL

For Canadian hires: AltaGas hires personnel on the basis of job-related qualifications. All qualified applicants will receive consideration without regard to a person's ancestry, place of origin, colour, ethnic origin, citizenship, creed, sex, sexual orientation, gender identity or expression, age, record of offences, marital status, family status or disability or any other characteristic protected by applicable law.