Network Architect

Design, deploy, and maintain enterprise firewall architecture across Palo Alto and Fortigate platforms, including policy standardization and rule-base optimization

Architect and manage SD-WAN fabric across corporate and OT sites, including transport selection, path steering policies, and failover design

Design and maintain dynamic routing (BGP/OSPF) across the WAN, data center, and OT environments to ensure resilient, redundant connectivity

Own network segmentation strategy (VLANs, zones, micro-segmentation) separating IT, OT, and DMZ environments per Purdue Model best practices

Lead NERC CIP compliance efforts for network infrastructure, including Electronic Security Perimeter (ESP) design, access controls, and audit evidence support

Design and support OT network infrastructure connecting SCADA, substations, and generation sites, ensuring reliability and security

Serve as escalation point for complex network, firewall, and routing incidents; lead root-cause analysis

Maintain network architecture documentation, standards, and disaster recovery/failover runbooks

Experience/Qualifications/Education Required

Bachelor’s degree in computer science, Network Engineering, or a related technical field, or equivalent work experience. 8-10 years of progressive experience designing and supporting enterprise network and security infrastructure, with deep, hands-on expertise in Palo Alto and Fortigate firewall platforms (including Panorama and Fortimanager), SD-WAN architecture, dynamic routing protocols (BGP, OSPF), NAT design, and network segmentation. Direct experience with NERC CIP compliance and OT/ICS/SCADA network environments strongly preferred. Relevant certifications such as PCNSE, Fortinet NSE, or CCNP are a plus.

Additional Requirements

This position must balance strong network security with the operational reliability requirements of critical OT and generation environments, where downtime carries significant business and safety impact. Typical challenges include troubleshooting complex routing and firewall policy interactions across segmented IT/OT zones, maintaining NERC CIP audit readiness, and evaluating new technologies for compatibility with legacy SCADA systems. These are addressed through structured change management, close coordination with OT and compliance stakeholders, thorough documentation, and staying current on evolving security and regulatory requirements.

The expected starting pay range for this role is $111,000.00 - $139,000.00 USD. This range is an estimate and base pay may be above or below the ranges based on several factors including but not limited to location, work experience, certifications, and education. In addition to base pay, Pattern’s compensation program includes a bonus structure for full-time employees of all levels. We also provide a comprehensive benefits package which includes medical, dental, vision, short and long-term disability, life insurance, voluntary benefits, family care benefits, employee assistance program, paid time off and bonding leave, paid holidays, 401(k)/RRSP retirement savings plan with employer contribution, and employee referral bonuses.

Pattern Energy Group is an Equal Opportunity Employer.

#LI-MK1 #LI-Hybrid