Back to jobs
New

Staff Network Architect - OT/SCADA

Houston, Texas, United States

ON.energy is building the backbone of energy and AI infrastructure powering grid-safe data centers and mission-critical facilities. The company supplies and operates hyperscale power systems that solve the toughest resilience challenges, delivering custom solutions for AI data centers, mission-critical facilities, and front-of-the-meter assets. ON recently announced a 5GW partnership, with 3GW currently under construction across multiple hyperscale data center campuses. With patented technology and proprietary software, ON.energy develops projects worldwide that set new benchmarks for resilience.

Role Summary

We're hiring a Senior OT/SCADA Network Architect to be the in-house design authority on OT networks for our AI data center UPS projects. You'll work side by side with the engineering manager, who sets direction and approves the architecture. Within that, the design work is yours.
We build from a standard base network design that serves as the template for every project, adapted per site for size, topology, and interconnection requirements. You'll help refine that template and apply it project by project, so your work compounds across the portfolio instead of being rebuilt each time.

 

Key Responsibilities

Architect the OT network

  • Develop the designs, analyze the options, and make the technical recommendations decisions are built on. The manager gives final approval; the design is your craft.
  • Refine the base design template: zoning model, IP and VLAN scheme, redundancy topology, equipment baseline and adapt it per project, flagging when a site genuinely needs to deviate rather than quietly forcing a fit.
  • Produce the design packages: L1/L2/L3 diagrams, IP and VLAN schedules, switching and routing configurations, port maps, and cable/fiber schedules.
  • Design heavily segmented, multi-zone networks: Purdue-aligned levels, DMZs, conduits between zones, along with the redundancy, QoS, and time synchronization (NTP/PTP/IRIG-B) that keep control traffic reliable.
  • Design site-to-site VPN connectivity into our cloud environment, secure remote access for our engineers and vendors, and out-of-band management.
  • Support design reviews and commissioning: network test plans, troubleshooting during energization, and as-builts. Document decisions clearly enough that project engineers and technicians can execute without re-deriving your reasoning.

Own the IT/OT boundary

  • Apply a clear model of IT/OT separation: where the boundary sits, what crosses it, and why.
  • Map dataflows end to end, from PCS, BMS, meters, and site SCADA through to our cloud environment and client-facing platforms.
  • Design the DMZ, gateway, and data-transfer patterns that get business systems the data they need without exposing control systems, and coordinate with IT and cloud teams on identity and remote access.

Guide vendor and equipment selection

  • Recommend network and infrastructure equipment: industrial switches, routers, firewalls, media converters, gateways, to include weighing environmental ratings, form factor, PoE budgets, protocol support, lifecycle, and spares. Present trade-offs, not a single answer.
  • Review vendor and OEM submittals against our base design, recommend how to close gaps, and support procurement with sizing justification and lead-time input.
  • Support spec compute and infrastructure (industrial and rack servers, virtualization sizing, storage, redundant power, UPS) and coordinate with electrical teams on panel layouts, enclosures, grounding, and surge protection.

Design with security in mind

  • Build in segmentation, least privilege, hardened baselines, and explicit trust boundaries between IT, OT, client, and vendor networks.
  • Contribute to industrial firewall design: zone-to-zone rule sets, OT protocol inspection where required and secure remote access patterns (jump hosts, MFA, SSO).
  • Apply IEC 62443 concepts in design decisions and support compliance and audit work with drawings and documentation.
  • Support asset inventory, network monitoring, and centralized logging so we can see what's on our networks.

Understand the protocols

  • Know the protocols in our stack: Modbus TCP/RTU, DNP3, IEC 61850, IEC 60870-5-104, OPC UA, MQTT, to include their bandwidth, timing, and segmentation implications, and how to troubleshoot them at the packet level.
  • Our controls and SCADA engineers own protocol configuration and point mapping. You don't need to own that layer, but you do need to speak the language and anticipate how design choices affect it.

 

Required Experience

  • 8+ years in network engineering and architecture, including 5+ years designing OT, ICS, or SCADA networks. This experience can be within energy, utilities, data centers or mission-critical facilities, oil & gas, water, or heavy industry.
  • Proven experience designing heavily segmented, multi-zone networks for large systems. Be ready to walk us through a zoning model you worked on, why the boundaries fell where they did, and what you'd change now.
  • Strong routing and switching: VLANs, trunking, L3 routing (OSPF/BGP/static), NAT, ACLs, spanning-tree and ring redundancy, and structured IP planning.
  • Site-to-site IPsec VPN design and troubleshooting, including tunnel routing, redundancy, and failover.
  • Clear grasp of IT/OT separation and dataflow design: DMZs, gateways, and why a control network isn't just another VLAN.
  • Working fluency in industrial protocols (Modbus, DNP3, IEC 61850 or IEC 60870-5-104, OPC UA) and how they behave on a loaded network.
  • Hands-on firewall design with at least one major platform (Palo Alto, Fortinet, Cisco FTD/ASA, Check Point).
  • Working familiarity with IEC 62443.
  • Strong documentation and drawing skills. This role produces packages other people build from with a collaborative style, since you'll be paired closely with the engineering manager and cross-functional teams.

Preferred Experience

  • Proprietary industrial ring redundancy: Moxa Turbo Ring / Turbo Chain, Advantech X-Ring / X-Chain, or similar — including the judgment for when sub-second ring recovery is worth it over standard spanning-tree.
  • Industrial hardware lines (Moxa, Advantech, Cisco IE/ISA-3000, Tofino) and equipment evaluation or standardization work.
  • Battery storage, data center power, solar, wind, or substation automation, including power plant controllers (PPC), EMS/SCADA platforms, BMS and PCS integration, revenue metering.
  • Cloud networking: VPC design, site-to-site VPN, transit gateways, route tables, security groups.
  • Exposure to NERC CIP, or to the frameworks data center clients tend to impose (SOC 2, ISO 27001). We expect our compliance scope to grow as this business does.
  • Hardware specification: server and storage sizing, virtualization, industrial compute, UPS and DC power, enclosure design.
  • Certifications such as CCNP/CCIE, GICSP, GIAC GRID/GCIP, ISA/IEC 62443 Cybersecurity Specialist, CISSP, PCNSE/NSE, or equivalent.
  • Scripting for configuration and validation (Python, Ansible), and OT monitoring tooling (Nozomi, Claroty, Dragos, Zabbix).

Travel: Occasional site travel for commissioning support, corporate meetings, and factory acceptance testing (~10%)

#LI-AD1

For US-based roles - What you’ll get:

  • Competitive salary + annual performance-based bonus eligibility
  • Medical, dental, and vision insurance
  • 401(k) with company match
  • Paid time off and company holidays 

For Mexico-based roles - What you’ll get:

  • Competitive salary + annual performance bonus eligibility
  • Christmas Bonus (Aguinaldo): 30 days
  • Major medical expenses and life insurance
  • Paid time off and holidays (per local policy)

For all roles:

  • Professional development and growth opportunities
  • Opportunity to grow with a mission-driven team shaping the future of clean energy
  • Equal Opportunity: ON.energy is committed to equal employment opportunity and to maintaining a work environment free of harassment, discrimination, or retaliation.
  • Accommodations: If you need an accommodation during the application process, email recruitment@onenergystorage.com
  • Benefits vary by role and location and are subject to change.

Agency Notice: ON.energy does not accept unsolicited resumes from staffing agencies, search firms, or third-party recruiters. Resumes submitted without a fully executed Master Services Agreement (MSA) and a written request from an authorized member of our Talent Acquisition team will be considered the property of ON.energy. No placement fees or compensation will be paid for unsolicited candidate submissions.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...

U.S. Standard Demographic Questions

We invite applicants to share their demographic background. If you choose to complete this survey, your responses may be used to identify areas of improvement in our hiring process.
Select...
Select...
Select...
Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in ON.energy’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 07/31/2029

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.