Wunderlich-Malec Engineering is seeking a Senior IT/OT Network Engineer to design, secure, and support the networks that connect enterprise IT systems with industrial control environments. You will serve as the bridge between traditional IT infrastructure and plant-floor OT systems, delivering resilient, secure network architectures for our clients in manufacturing, water/wastewater, energy, life sciences, and other process industries, while also supporting WME’s internal infrastructure. **Location: Anywhere in US**
This is a senior, hands-on role. You will lead network design on client projects, mentor junior engineers, and be the subject-matter expert for ICS network security, segmentation, and industrial protocols.
Please note: This position is not eligible for H-1B employer-sponsored work authorization.
Key Responsibilities
- Design, implement, and document IT/OT network architectures including segmentation models (Purdue Model, zones and conduits per ISA/IEC 62443), industrial DMZs, and secure remote access.
- Configure and support switching, routing, firewalls, VPNs, and wireless across both enterprise and industrial environments (Cisco, Cisco Industrial/IE series, Stratix, Hirschmann, Palo Alto, Fortinet, or similar).
- Integrate PLCs, HMIs, SCADA, DCS, and historians onto properly segmented networks; troubleshoot industrial protocols such as EtherNet/IP, Modbus TCP, PROFINET, OPC UA, and DNP3.
- Perform network assessments, vulnerability reviews, and gap analyses against ISA/IEC 62443, NIST 800-82, and client cybersecurity standards; recommend and implement remediation.
- Deploy and tune OT visibility and monitoring tools (e.g., Claroty, Nozomi, Dragos, Cisco Cyber Vision) and integrate with enterprise SIEM/NAC.
- Lead network portions of control system projects: requirements gathering, bill of materials, design drawings, FAT/SAT, commissioning, and cutover planning with minimal production impact.
- Produce high-quality deliverables including network diagrams, IP schemas, configuration standards, and as-built documentation.
- Support virtualization and server infrastructure for OT (VMware/Hyper-V, Windows Server, Active Directory, backup and DR) where it intersects with the network.
- Provide tier-3 escalation support and participate in on-call or emergency response for critical client systems as needed.
- Mentor engineers, review designs, and contribute to WME’s internal standards, templates, and best practices.
- Interface directly with client IT, OT, and plant operations stakeholders; translate technical risk into business terms.
Required Qualifications
- Bachelor’s degree in Computer Science, Electrical Engineering, Information Technology, or related field, or equivalent experience.
- 7+ years of network engineering experience, with at least 3 years in industrial/OT environments (manufacturing, utilities, oil and gas, pharma, or similar).
- Expert-level knowledge of TCP/IP, VLANs, routing protocols (OSPF, BGP, EIGRP), spanning tree, QoS, NAT, and firewall policy design.
- Hands-on experience with industrial Ethernet, ring topologies (REP, DLR, MRP), and ruggedized/managed industrial switches.
- Working knowledge of ISA/IEC 62443 and the Purdue reference architecture.
- Experience with firewalls and secure remote access solutions in ICS environments.
- Strong documentation skills and ability to produce engineering-grade drawings (Visio or similar).
- Ability to travel to client sites, approximately [25–40%].
- Must be a U.S. citizen or permanent resident; some projects may require background checks or site-specific clearances.
Preferred Qualifications
- CCNP (Enterprise or Security), CCNA Industrial, PCNSE, NSE 4+, or equivalent.
- GICSP, ISA/IEC 62443 Cybersecurity Expert, or CISSP.
- Experience with Rockwell, Siemens, Emerson, or Honeywell control platforms.
- Experience with OT asset discovery/monitoring platforms and SIEM integration.
- Scripting/automation experience (Python, PowerShell, Ansible) for configuration management.
- Prior work for a systems integrator or engineering consulting firm.
*Job Descriptions are not exhaustive lists of all skills, responsibilities, or efforts associated with a job. They reflect principal job elements essential for performing the job and evaluating performance
Wunderlich-Malec is proud to offer a comprehensive employee-owner benefit package. Full-time employees may be eligible for the following benefits: Medical • Dental • Vision • Basic and Supplemental Life and AD&D • Long Term Disability • Voluntary Short Term Disability • Healthcare & Dependent Care Flexible Spending Accounts • Health Savings Account • Paid Time Off (PTO) • Paid Holidays • Tuition Reimbursement • Referral Bonus Program • 401(k)/Profit Sharing • 100% ESOP (Employee Stock Ownership Plan) • Employee Assistance Program • Will Preparation Resources • Worldwide Travel Assistance
The expected salary range is $115,000 - $130,000 per year depending on qualifications plus a discretionary bonus and employee stock program.
#LI-WM1
#LI-Hybrid
Qualifications Behaviors Preferred Team Player: Works well as a member of a group Detail Oriented: Capable of carrying out a given task with all details necessary to get the task done well Equal Opportunity Employer/Protected Veterans/Individuals with DisabilitiesThis employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.
Skills Required
- Bachelor's degree, associate's degree in Computer Science or MIS, industry certification, or an equivalent combination of education and experience
- Proven experience managing and troubleshooting large and complex networks
- Comprehensive knowledge of network administration, hardware, and software, including Fortinet, Cisco, or Aruba technologies
- At least three years of experience with Layer 2 and Layer 3 switch programming
- Cisco Certified Network Associate (CCNA) or CompTIA Security+ certification
- Advanced knowledge of Microsoft Office applications, including Visio and Project
- Ability to multitask, adapt to change, and work in a fast-paced environment
- Ability to complete complex projects with minimal to no supervision
- Strong verbal and written communication skills for conveying information to onsite and remote end users
- Ability to occasionally lift, carry, or move up to 50 pounds
- Ability to travel up to 25%
- Candidates must be local to the Eden Prairie, Minnesota headquarters
What We Do
Wunderlich-Malec has been providing customers with engineering, system integration and fabrication solutions for more than 35 years. With offices throughout the US and nearly 430 professionals on our staff, we are one of the largest and most well established engineering companies in the United States, and we've successfully finished numerous projects for our US clients in many parts of the world. We're confident that our qualified staff has the knowledge, experience and talent to create and deliver the solutions you need for your facility process and operation needs. Wunderlich-Malec ranks on Inc. 5000's Fastest Growing Private Companies list and is a GSA Schedule holder with the Federal Government for professional engineering services and manufacturing. Wunderlich-Malec is an engineering firm specializing in process controls solutions for a wide array of clients. Experts in the design, programming and deployment of automation systems for process, manufacturing, commercial buildings and public sector utilities. Skilled at electrical design, control system manufacturing, process integration, programming, testing, training, and ongoing support.
