Engineer II, OT Infrastructure

We are ERock! 

ERock (NYSE: EROC) is enabling energy for a new era. ERock delivers onsite utility-grade power that gets customers up and running quickly, while supporting long-term grid development. ERock’s proprietary natural gas generators help critical facilities address grid constraints, interconnection delays, and outage risks while accelerating speed-to-power for new and expanding operations. Trusted by data centers, utilities, manufacturers, healthcare systems and government organizations, ERock engineers for rapid deployment, long-duration reliability, low local emissions, and scalable performance to meet the evolving energy demands of today and tomorrow. 

Key Responsibilities:  

As an Infrastructure Engineer II, you will lead the hands-on engineering, configuration, and day-to-day administration of secure, resilient IT, OT, and industrial network and systems infrastructure across ERock’s Enterprise Environments, Data Centers, and Distributed Microgrid sites. You will: 

• Support secure, reliable infrastructure across ERock’s enterprise, data center, and remote microgrid environments. 
• Configure and troubleshoot networks and security, including SD-WAN, firewalls, switches, VPN tunnels, and hybrid cloud connectivity. 
• Maintain industrial connectivity for SCADA, PLCs, RTUs, and remote monitoring systems. 
• Administer VMware, Windows Server, and Active Directory, including provisioning, patching, and maintenance. 
• Resolve complex incidents with Helpdesk, Security, OT, and field teams while helping minimize operational disruptions. 
• Maintain standards and documentation, including backups, disaster recovery procedures, templates, and runbooks.

Requirements

Basic (Required) Qualifications: 

• Direct hands-on experience configuring, deploying, and troubleshooting Fortinet FortiGate firewalls, including firewall policies, IPsec/SSL VPNs, NAT, and core security profiles. 
• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent practical experience), along with 5–7+ years of hands-on infrastructure and networking experience. 
• Solid hands-on experience configuring, troubleshooting, and administering enterprise networking hardware and protocols, including BGP, OSPF, VLANs, IPsec VPNs, NAT, DNS/DHCP, QoS and routing policy management. 
• Working knowledge of industrial networks, including industrial managed switches, ruggedized field gear, and connectivity supporting SCADA and PLC communication. 
• Direct working experience administering VMware environments (ESXi, vCenter, VM provisioning, snapshot management, and virtual networking/vSwitches). 
• Hands-on system administration experience with Windows Server environments and patch management. 
• Experience with implementing network security designs, including stateful inspection, access segmentation, and Zero Trust fundamentals. 
• Experience deploying monitoring and alerting tools (e.g., SNMP, Syslog, PRTG, SolarWinds, or Datadog) to proactively detect performance issues and latency spikes. 
• Proven track record of managing multi-site deployment projects, coordinating with field technicians, and resolving escalated support tickets. 
• Willingness to travel up to 20% (local/regional). 
• Ability to lift and carry equipment weighing up to 20 pounds, review schematics and computer screens, and communicate effectively across teams. 

Preferred Qualifications: 

Required Qualifications & Experience: 

• Have hands-on experience with edge-to-cloud IoT systems and the challenges that come with them. 
• Have deep hands-on experience architecting distributed IT/OT networks across energy, utilities, oil & gas, industrial, or other mission-critical environments. 
• Have designed and secured segmentation strategies aligned to Purdue Model and regulatory standards such as NERC CIP.? 
• Bring expert-level experience with Fortinet, Cisco and/or Palo Alto architecture. 
• Have modernized legacy environments, reducing technical debt while increasing resiliency and compliance alignment.? 
• Possess strong routing expertise (BGP, DMVPN, IPsec) and understand how to engineer high-availability connectivity across unreliable or remote infrastructure.? 
• Are comfortable owning architecture standards, reviewing designs, mentoring engineers, and acting as escalation authority. 
• Hold advanced certifications (CCNP, CISSP, CISM, Fortinet NSE/FCNSP, PCNSE, etc.) and bring both strategic and hands-on credibility.? 

Preferred Skills: 

• Experience in utility, energy, industrial, or OT environments. 
• Familiarity with Modbus TCP, DNP3, industrial switches, fiber, and redundant network topologies. 
• Experience with Azure networking and hybrid identity. 

 Benefits: 

• Competitive Pay 
• Medical, Dental, Vision, and Prescription Drug Insurance 
• Company-Paid Life Insurance 
• Flexible Spending Account (FSA) 
• Health Savings Account (HSA) with a company contribution 
• Wellness Programs and Incentives 
• 401(k) Retirement Plan & Company Match 
• Paid Time Off – Sick & Vacation Time 
• Paid Holidays 

Do you have what it takes to join the ERock team? Send us your cover letter and resume today. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
ERock is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.