Centennial, CO

Salary
$95,000–$125,000
Posted
Jul 26, 2026
Location
Centennial, CO
Last confirmed open
Jul 27, 2026

What this job asks for AI summary

This role sits at the intersection of IT and industrial operations, responsible for designing, maintaining, and securing network infrastructure that supports ICS, SCADA, and DCS environments across remote field sites and a hybrid Azure cloud setup. Day-to-day work spans firewall and VPN management, OT cybersecurity (including NERC CIP compliance), network segmentation, and documentation of complex legacy environments. It suits an experienced network engineer with a background in industrial or critical infrastructure settings.

Senior level · 5+ years · Full-time

Long application — this platform typically asks you to create an account and re-enter your work history.

Must have (11)
networkingIndustrial EthernetVPNrouting and switchingAzureSQL Server, PostgreSQL or MySQLEtherNet/IPModbus TCP/IPPROFINETOPC UADNP3
Nice to have (13)
SCADAPLCDCSNERC CIPVMware or Hyper VPowerShell or PythonFortinet NSECCNACCNPPCNSEAzure Administrator AssociateGICSPISA/IEC 62443

“or” means any one of them counts — you don't need all of them.

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

What won't set you apart
networking55%Azure45%VPN40%SQL Server40%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $101,310 (middle half $79,725–$129,425).

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.

Why we read it this way (6)

The role sits at the boundary between network/systems administration (15-1244) and information security analysis (15-1212). The primary day-to-day work — designing, configuring, and maintaining OT/ICS network infrastructure, VPNs, firewalls, and remote-site connectivity — aligns more closely with network administration (15-1244), but the strong NERC CIP, cybersecurity, and access-control emphasis makes 15-1212 a credible runner-up.

The industrial communication protocols (EtherNet/IP, Modbus TCP/IP, PROFINET, OPC UA, DNP3) are listed under Key Responsibilities rather than a formal Required Qualifications section. They are included as required because the role is explicitly built around configuring and supporting these protocols, and the JD frames them as core job duties rather than optional extras.

The degree requirement accepts 'equivalent professional experience' in lieu of a Bachelor's degree, so the degree requirement is set to None.

No compensation figures are provided in the posting.

The preferred certifications (Fortinet NSE, CCNA, CCNP, PCNSE, Azure Administrator Associate, GICSP, ISA/IEC 62443) are listed under a 'Preferred Certifications' heading and are therefore marked as preferred.

Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): firewall administration.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗