Town of Castle Rock
Castle Rock Water - OT Network Infrastructure Engineer
Town of Castle Rock, Castle Rock, Colorado, United States, 80104
This posting will remain open continuously until filled.
The Town of Castle Rock's future and the quality of that depend on the choices we make today. Do you want to be part of a team that make decisions that work now while preserving and protecting Castle Rock's identity and quality of life for the future? We value
teamwork ,
cooperation , and
quality communication . We strive to provide exceptional public service to our customers and encourage creativity and innovation. We welcome all that share those values to apply.
Working for the
Town of Castle Rock
includes:
The opportunity to make a difference in our community Career Advancement Programs Employee well-being program Competitive total compensation with an excellent benefits package Free membership to the MAC or Recreation Center Public Service Student Loan Forgiveness eligible employer About Castle Rock Water: You can't live without water, and Castle Rock Water can't function without great employees. We're on the lookout for talented individuals who are seeking a place to be valued and make a difference.
Castle Rock Water provides drinking water, sanitary sewer, and storm drainage systems for the Town of Castle Rock's more than 80,000 residents and businesses. The Town is one of the fastest-growing and most sought-after communities in Colorado and it's consistently ranked among the best and safest places to live in the State.
Castle Rock Water aspires to be a national leader in the water industry, developing a complete reuse system with one of the most advanced purification facilities in the country, implementing some of the most progressive conservation measures in Colorado and partnering on regional infrastructure with other water providers to secure renewable water for Castle Rock and the greater South Metro area. Whether managing water treatment at the award-winning plant, maintaining the $730 million in infrastructure, overseeing the financial security of our growing system, or ensuring sustainable long-term water supplies for the community, Castle Rock Water has many opportunities available to learn and grow with the organization.
Essential Duties & Responsibilities:
Establishes networks by designing and developing scalable, maintainable and highly available network architectures, system configurations, implementing and integrating new networks, defining and documenting network diagrams. Design, deploy, and maintain network infrastructure supporting SCADA staff and Operational Technology (OT) environments. Work closely and collaborate with engineering teams to design network architectures that align with industry best practices and standards. Integrate OT networks with IT systems, ensuring minimal disruption to operational processes and alignment with system requirements. Collaborate with SCADA staff to understand control systems' needs and provide tailored network support for OT applications. Use network management tools to monitor system performance, promptly resolving any issues to minimize downtime and maintain continuous operations. Implement and maintain OT network solutions based on proven security architectures, including virtualization, networks, security platforms, and other OT technologies. Participate in the design, documentation, implementation, and maintenance of Industrial Control System (ICS) networks. Secure ICS projects and processes, including backup and disaster recovery, in accordance with industry best practice, NIST guidelines for ICS security, and CRW requirements. Install and configure network switches, routers, firewalls, radios, virtualized servers, client workstations, and various cybersecurity platforms and tools. Provide troubleshooting and support for network communications, hardware, firmware, and security configurations. Provide oversight and assistance to contractors, vendors, and consultants during construction or system upgrades, including reviewing network panels, cabling, server installations, and submittals. Participate in acceptance testing to ensure quality and compliance with specifications. Establish and maintain metrics to assess the operational readiness of critical network infrastructure. Conduct trending and capacity planning to ensure system resources meet demand at all CRW facilities. Secure networks by establishing and enforcing policies, defining access protocols, and monitoring access controls to maintain system integrity. Monitor system architecture for performance issues related to volume, capacity, and bandwidth. Assist with purchasing recommendations, hardware/software installation, and backup recovery. Investigate and resolve performance issues with applications, systems, and network devices to maintain optimal performance and efficiency. Manage and optimize fiber and radio communications infrastructure, including but not limited to 220 MHz, 5 GHz, and 18-21 GHz networks, ensuring consistent and reliable data flow for CRW's critical operations. Regularly conduct vulnerability assessments and apply network segmentation techniques specific to industrial networks to mitigate threats effectively. Performs network equipment replacement and configuration using the change control process. Performs Cisco IOS configurations and firewall administration. Supports SCADA team with network related issues, including complex wiring, cable management, and equipment installations. Performs other duties as assigned or required. Minimum Qualifications:
An equivalent combination of education, training, and experience that demonstrates required knowledge, skills, and abilities may be considered.
Education:
Bachelor's degree in Computer Science, Information Technology, or a closely related field.
Experience:
At least two (2) years of experience in industrial networks, or training that includes hands-on experience with mid-sized computer networks, network architecture, deployment, and system repair across multiple locations; or any equivalent combination of education, training, or experience.
Licenses and/or Certifications:
A valid Driver's License
Preferred Certifications:
GIAC Certifications including Global Industrial Cyber Security Professional (GISCP) and GIAC Security Expert (GSE) is preferred Offensive Security Certified Professional (OSCP) is preferred Certified Information Systems Auditor (CISA) Certified Information Systems Security Professional (CISSP), Certified Cyber Forensics Professional (CCFP), or Certified Information Security Manager (CISM) Microsoft Certifications (MCP, MCSE, MCITP) Cisco Certifications (CCNA, CCDA, CCNP, CCIE) Knowledge, Skills, and Abilities:
Ability to demonstrate active participation in The Town of Castle Rock Values. Strong knowledge of application transport and network infrastructure protocols. Ability to create complex Visio network diagrams and documentation. The ability to troubleshoot network problems using tools such as ping, traceroute, cable test equipment, run and correctly terminate Ethernet cables. Strong working knowledge of IP addressing, masking, and routing. A thorough understanding of VLANs and VLAN trunking. Strong understanding of Layer 2 and Layer 3 switching. Experience with RF signal testing, interference analysis, and frequency management for radio networks. Experience with Xetawave, Cambium, or similar radio technologies. Ability to utilize and design a variety of advisory information, including software and hardware manuals, networking manuals, technology publications and the Internet. Skill in installing computer/server hardware and software. Ability to listen to internal customers and to effectively convey technical information to internal customers in a plain and common descriptive manner. Strong analytical and problem-solving skills. Ability to establish and maintain effective working relationships. Physical Demands:
May include exertion of moderate physical effort to include lifting, carrying, pushing and/or pulling of objects and materials up to 60 pounds Frequent performance of activities requiring a full range of body movement including climbing, balancing, stooping, kneeling/bending, crouching, crawling, and/or twisting Frequent hand/eye coordination to operate tools and electrical equipment as well as for driving equipment and vehicles Vision for reading, recording and interpreting information Speech communication and hearing to maintain communication with employees and citizens Work Environment:
Ability to drive to and physically access Town facilities Some duties may be performed in potentially any weather and environmental conditions Ability to safely work with and in close proximity to high voltage electrical equipment Equipment Used:
This position may require the incumbent to occasionally use personal equipment (e.g. vehicle, cell phone, tools, etc.) in the course of their employment
This posting is subject to close at any point in time once a qualified pool of applicants has been obtained.
Must satisfactorily complete a criminal background check and driving record check prior to commencing employment.
The Town of Castle Rock is an Equal Opportunity Employer.
The Town of Castle Rock's future and the quality of that depend on the choices we make today. Do you want to be part of a team that make decisions that work now while preserving and protecting Castle Rock's identity and quality of life for the future? We value
teamwork ,
cooperation , and
quality communication . We strive to provide exceptional public service to our customers and encourage creativity and innovation. We welcome all that share those values to apply.
Working for the
Town of Castle Rock
includes:
The opportunity to make a difference in our community Career Advancement Programs Employee well-being program Competitive total compensation with an excellent benefits package Free membership to the MAC or Recreation Center Public Service Student Loan Forgiveness eligible employer About Castle Rock Water: You can't live without water, and Castle Rock Water can't function without great employees. We're on the lookout for talented individuals who are seeking a place to be valued and make a difference.
Castle Rock Water provides drinking water, sanitary sewer, and storm drainage systems for the Town of Castle Rock's more than 80,000 residents and businesses. The Town is one of the fastest-growing and most sought-after communities in Colorado and it's consistently ranked among the best and safest places to live in the State.
Castle Rock Water aspires to be a national leader in the water industry, developing a complete reuse system with one of the most advanced purification facilities in the country, implementing some of the most progressive conservation measures in Colorado and partnering on regional infrastructure with other water providers to secure renewable water for Castle Rock and the greater South Metro area. Whether managing water treatment at the award-winning plant, maintaining the $730 million in infrastructure, overseeing the financial security of our growing system, or ensuring sustainable long-term water supplies for the community, Castle Rock Water has many opportunities available to learn and grow with the organization.
Essential Duties & Responsibilities:
Establishes networks by designing and developing scalable, maintainable and highly available network architectures, system configurations, implementing and integrating new networks, defining and documenting network diagrams. Design, deploy, and maintain network infrastructure supporting SCADA staff and Operational Technology (OT) environments. Work closely and collaborate with engineering teams to design network architectures that align with industry best practices and standards. Integrate OT networks with IT systems, ensuring minimal disruption to operational processes and alignment with system requirements. Collaborate with SCADA staff to understand control systems' needs and provide tailored network support for OT applications. Use network management tools to monitor system performance, promptly resolving any issues to minimize downtime and maintain continuous operations. Implement and maintain OT network solutions based on proven security architectures, including virtualization, networks, security platforms, and other OT technologies. Participate in the design, documentation, implementation, and maintenance of Industrial Control System (ICS) networks. Secure ICS projects and processes, including backup and disaster recovery, in accordance with industry best practice, NIST guidelines for ICS security, and CRW requirements. Install and configure network switches, routers, firewalls, radios, virtualized servers, client workstations, and various cybersecurity platforms and tools. Provide troubleshooting and support for network communications, hardware, firmware, and security configurations. Provide oversight and assistance to contractors, vendors, and consultants during construction or system upgrades, including reviewing network panels, cabling, server installations, and submittals. Participate in acceptance testing to ensure quality and compliance with specifications. Establish and maintain metrics to assess the operational readiness of critical network infrastructure. Conduct trending and capacity planning to ensure system resources meet demand at all CRW facilities. Secure networks by establishing and enforcing policies, defining access protocols, and monitoring access controls to maintain system integrity. Monitor system architecture for performance issues related to volume, capacity, and bandwidth. Assist with purchasing recommendations, hardware/software installation, and backup recovery. Investigate and resolve performance issues with applications, systems, and network devices to maintain optimal performance and efficiency. Manage and optimize fiber and radio communications infrastructure, including but not limited to 220 MHz, 5 GHz, and 18-21 GHz networks, ensuring consistent and reliable data flow for CRW's critical operations. Regularly conduct vulnerability assessments and apply network segmentation techniques specific to industrial networks to mitigate threats effectively. Performs network equipment replacement and configuration using the change control process. Performs Cisco IOS configurations and firewall administration. Supports SCADA team with network related issues, including complex wiring, cable management, and equipment installations. Performs other duties as assigned or required. Minimum Qualifications:
An equivalent combination of education, training, and experience that demonstrates required knowledge, skills, and abilities may be considered.
Education:
Bachelor's degree in Computer Science, Information Technology, or a closely related field.
Experience:
At least two (2) years of experience in industrial networks, or training that includes hands-on experience with mid-sized computer networks, network architecture, deployment, and system repair across multiple locations; or any equivalent combination of education, training, or experience.
Licenses and/or Certifications:
A valid Driver's License
Preferred Certifications:
GIAC Certifications including Global Industrial Cyber Security Professional (GISCP) and GIAC Security Expert (GSE) is preferred Offensive Security Certified Professional (OSCP) is preferred Certified Information Systems Auditor (CISA) Certified Information Systems Security Professional (CISSP), Certified Cyber Forensics Professional (CCFP), or Certified Information Security Manager (CISM) Microsoft Certifications (MCP, MCSE, MCITP) Cisco Certifications (CCNA, CCDA, CCNP, CCIE) Knowledge, Skills, and Abilities:
Ability to demonstrate active participation in The Town of Castle Rock Values. Strong knowledge of application transport and network infrastructure protocols. Ability to create complex Visio network diagrams and documentation. The ability to troubleshoot network problems using tools such as ping, traceroute, cable test equipment, run and correctly terminate Ethernet cables. Strong working knowledge of IP addressing, masking, and routing. A thorough understanding of VLANs and VLAN trunking. Strong understanding of Layer 2 and Layer 3 switching. Experience with RF signal testing, interference analysis, and frequency management for radio networks. Experience with Xetawave, Cambium, or similar radio technologies. Ability to utilize and design a variety of advisory information, including software and hardware manuals, networking manuals, technology publications and the Internet. Skill in installing computer/server hardware and software. Ability to listen to internal customers and to effectively convey technical information to internal customers in a plain and common descriptive manner. Strong analytical and problem-solving skills. Ability to establish and maintain effective working relationships. Physical Demands:
May include exertion of moderate physical effort to include lifting, carrying, pushing and/or pulling of objects and materials up to 60 pounds Frequent performance of activities requiring a full range of body movement including climbing, balancing, stooping, kneeling/bending, crouching, crawling, and/or twisting Frequent hand/eye coordination to operate tools and electrical equipment as well as for driving equipment and vehicles Vision for reading, recording and interpreting information Speech communication and hearing to maintain communication with employees and citizens Work Environment:
Ability to drive to and physically access Town facilities Some duties may be performed in potentially any weather and environmental conditions Ability to safely work with and in close proximity to high voltage electrical equipment Equipment Used:
This position may require the incumbent to occasionally use personal equipment (e.g. vehicle, cell phone, tools, etc.) in the course of their employment
This posting is subject to close at any point in time once a qualified pool of applicants has been obtained.
Must satisfactorily complete a criminal background check and driving record check prior to commencing employment.
The Town of Castle Rock is an Equal Opportunity Employer.