Operational Technology (OT) Network Administrator

Job Title: Operational Technology (OT) Network Administrator

Security Clearance: Top Secret

Location: Guam

(Due to the nature of the work and contract requirements, U.S. Citizenship is required.)

C3EL is seeking an experienced Operational Technology (OT) Network Administrator to support critical facility and infrastructure operations for a Department of Defense customer in Guam. The selected candidate will provide advanced network administration and cybersecurity support within complex IT/OT environments, ensuring secure, reliable, and highly available connectivity for facility control systems and mission-critical operations.

The ideal candidate will have hands-on experience supporting ICS, SCADA, Building Management Systems (BMS), Facility Related Control Systems (FRCS), or other operational technology environments, with a strong understanding of network segmentation, industrial protocols, firewall administration, and DoD cybersecurity requirements.

This position requires the ability to operate in facility environments, collaborate with government stakeholders, and support secure technology solutions while minimizing operational impact to critical systems.

Responsibilities will include, but not be limited to:

• Perform advanced network administration, troubleshooting, and maintenance of IT/OT network environments supporting DoD facility operations.
• Configure, maintain, and troubleshoot network infrastructure including routers, switches, VLANs, routing protocols, firewalls, ACLs, and network segmentation solutions.
• Support secure integration and operation of Operational Technology (OT), Industrial Control Systems (ICS), SCADA, Building Management Systems (BMS), and Facility Related Control Systems (FRCS).
• Develop and maintain firewall rules, access controls, and network security configurations to support secure and deterministic traffic flows.
• Apply DoD cybersecurity requirements, including STIG compliance, vulnerability remediation, and secure configuration management within OT environments.
• Support network design, modernization efforts, system integration, testing, commissioning, and operational acceptance activities.
• Analyze network performance metrics including bandwidth utilization, latency, jitter, packet loss, and connectivity issues.
• Utilize packet capture and analysis tools such as Wireshark to troubleshoot network communication issues.
• Develop and maintain network documentation including topology diagrams, configuration backups, and technical reports.
• Support implementation of OT network segmentation aligned with cybersecurity best practices, including Purdue Model concepts.
• Coordinate with government personnel, engineers, vendors, and mission stakeholders to resolve technical issues.
• Prepare technical documentation, reports, correspondence, and status updates for government leadership and project stakeholders.

• An active, in-scope US Government issued Top Secret clearance.
• Must possess at least one (1) approved intermediate certification: Security+, CEH, Cloud+, GCIH, GICSP, GSEC, or SSCP
• Must possess at least one (1) approved advanced certification: SecurityX (CASP+), CCNA, CCNP Security, CCSP, GCED, GCIA, GCLD, GDSA, or GFACT
• Minimum of 5 years of advanced network administration experience.
• Minimum of 3 years of experience supporting OT, ICS, SCADA, BMS, FRCS, or IT/OT network environments.
• Experience with network administration concepts including:
  • Routing and switching
  • VLAN configuration
  • Firewall administration
  • ACL development
  • Network segmentation
  • Network troubleshooting
• Experience supporting cybersecurity requirements in operational environments where changes must be carefully managed to avoid impacting physical systems or facility operations.
• Ability to communicate effectively with government customers, technical teams, and stakeholders.
• Experience preparing technical documentation, reports, and correspondence.
• Proficiency with Microsoft Office Suite (Word, Excel, PowerPoint, Outlook).
• Ability to perform physical requirements associated with facility environments, including:
  • Standing and walking for extended periods
  • Working in mechanical/equipment rooms
  • Climbing ladders
  • Bending, crouching, and reaching
  • Lifting and moving equipment up to 25 pounds

• Computing Environment (CE) Certifications: The following relevant network operating system, routing/switching, or firewall environment certifications are highly desirable: Cisco CCNA/CCNP, Palo Alto PCNSA/PCNSE, Juniper JNCIA/JNCIS, or Cisco Managing Industrial Networks with Cisco Networking Technologies (IMINS)
• Experience supporting Department of Defense facility systems or mission-critical infrastructure.
• Experience with industrial protocols including:
  • BACnet/IP
  • Modbus TCP
  • DNP3
  • CIP
  • LonWorks
• Experience with industrial networking technologies:
  • Cisco Industrial Ethernet
  • Allen-Bradley Stratix
  • Ruggedcom
  • Similar industrial switching platforms
• Experience with next-generation firewalls such as Palo Alto, Cisco, or Fortinet.
• Experience with:
  • Purdue Model architecture
  • NIST SP 800-82
  • ISA/IEC 62443
  • Ports, Protocols, and Services Management (PPSM)
  • Data diodes/unidirectional gateways
• Experience supporting facility modernization, MILCON/SRM projects, or system integration efforts.