NERC CIP Network Specialist

Role Summary
This position involves supporting secure network infrastructure within a critical operational technology environment. The Network Specialist will focus on designing, implementing, and maintaining cybersecurity controls to ensure compliance with NERC CIP standards. The role requires a proactive approach to managing enterprise network security, vulnerability assessments, and cross-functional collaboration to protect vital systems.

Responsibilities

• Design, configure, and support Palo Alto Networks firewalls to ensure reliable and secure network operations.
• Support NERC CIP compliance initiatives, including documentation, evidence collection, audit readiness, and remediation activities.
• Manage and troubleshoot complex firewall, network, and operational technology security issues.
• Collaborate with engineering, cybersecurity, and operations teams to implement security controls supporting critical systems.
• Configure and support network technologies including Cisco ASA firewalls, DNS, DHCP, NAC, AAA, and Cisco ISE.
• Conduct vulnerability assessments using tools such as Tenable, Qualys, or IP360, and partner with system owners to prioritize and address risks.
• Support patch management and risk-based remediation activities for maintaining compliance and security.
• Monitor and maintain high availability and performance of firewall and network infrastructure.
• Assist in developing operational support processes for firewall administration, incident response, and compliance activities.
• Coordinate with stakeholders to align security and networking solutions with organizational standards, operational needs, and regulatory requirements.

Qualifications

• Experience supporting NERC CIP compliance in utility, energy, or regulated critical infrastructure environments.
• Proven experience managing Palo Alto Networks firewalls in enterprise settings.
• Strong understanding of Operational Technology environments and industrial cybersecurity principles.
• Experience with Cisco ASA firewalls and supporting enterprise networking technologies.
• Working knowledge of DNS, DHCP, NAC, AAA, and Cisco ISE.
• Minimum of 2 years in cybersecurity, IT operations, vulnerability management, or network security.
• Hands-on experience with vulnerability scanning tools such as Tenable, Qualys, or IP360.
• Familiarity with patch management, security baselines, and risk-based vulnerability remediation.
• Strong troubleshooting and analytical skills to resolve complex security and networking issues.
• Excellent communication skills for working with technical and non-technical stakeholders.
• Strong organizational skills to manage multiple priorities independently and in cross-functional teams.
• Ability to travel within San Diego County to substations and critical facilities.

Publishing Pay Range: $60.00 – $69.00 hourly

This position is based in the San Diego metropolitan area and requires on-site presence.