We are seeking a NERC CIP Network Specialist with a strong background in Palo Alto Networks firewalls, enterprise networking, and Operational Technology (OT) environments to join our team in the San Diego metropolitan area. This role will focus on designing, implementing, and supporting secure network infrastructure that meets NERC CIP compliance requirements while ensuring the reliability and security of critical OT systems.
The ideal candidate will have experience managing firewall technologies, supporting cybersecurity and compliance initiatives, performing vulnerability management activities, and collaborating with cross-functional teams to enhance the organization's security posture. Key Responsibilities
- Design, configure, implement, and support Palo Alto Networks firewalls to ensure secure, reliable, and high-performing network operations.
- Support NERC CIP compliance initiatives, including documentation, evidence collection, audit preparation, and remediation activities.
- Manage and troubleshoot complex firewall, network, and Operational Technology (OT) security issues.
- Collaborate with engineering, cybersecurity, and operations teams to implement and maintain OT security controls and network infrastructure supporting critical systems.
- Configure and support networking technologies, including Cisco ASA firewalls, DNS, DHCP, Network Access Control (NAC), Authentication, Authorization and Accounting (AAA), and Cisco Identity Services Engine (Client).
- Perform vulnerability assessments using tools such as Tenable, Qualys, IP360, or similar platforms, and partner with system owners to prioritize and remediate identified risks.
- Support patch management efforts and risk-based remediation activities to maintain secure and compliant environments.
- Monitor and maintain firewall and network infrastructure to ensure high availability, performance, and security.
- Assist in developing and improving operational support processes for firewall administration, incident response, and compliance activities.
- Work with cross-functional stakeholders to ensure networking and security solutions align with organizational standards, operational requirements, and regulatory obligations. Required Qualifications
- Experience supporting NERC CIP compliance within utility, energy, or other regulated critical infrastructure environments.
- Proven experience administering Palo Alto Networks firewalls in enterprise environments.
- Strong understanding of Operational Technology (OT) environments and industrial cybersecurity principles.
- Experience supporting Cisco ASA firewalls and enterprise networking technologies.
- Working knowledge of DNS, DHCP, NAC, AAA, and Cisco Client.
- Minimum of 2 years of experience in cybersecurity, IT operations, vulnerability management, or network security.
- Hands-on experience with vulnerability scanning tools such as Tenable, Qualys, IP360, or similar solutions.
- Familiarity with patch management processes, security baselines, and risk-based vulnerability remediation.
- Strong troubleshooting and analytical skills with the ability to resolve complex networking and security issues.
- Excellent written and verbal communication skills with the ability to work effectively with both technical and non-technical stakeholders.
- Strong organizational skills with the ability to manage multiple priorities independently and as part of a cross-functional team.
- Ability to travel to substations and critical facilities throughout San Diego County. Preferred Qualifications
- Understanding of NERC CIP evidence collection, audit preparation, and compliance documentation.
- Experience within the electric utility, energy, or other critical infrastructure industries.
- Knowledge of OT security controls, industrial control systems (ICS), or physical equipment monitoring environments.
- Experience with scripting or automation using PowerShell, Python, or similar languages.
- Proficiency with Microsoft Excel, dashboarding, and reporting tools.
- Familiarity with additional enterprise networking and security technologies beyond those listed above.