Network Architect Cisco Scada Cambridge

A leading IT Consultancy is seeking a Network Architect on a contract basis to work on a project with a leading Utilities Company.

The Network Architect will be based in Huntingdon mainly. However they may have to travel to sites for site walkthrough on need basis and setting up Router switch set-up during commissioning. Once a month there is a Architectural workshop planned in Peterborough, which they may need to attend based on agenda.

The Network Architect must have experience in Cisco and Scada.

Role Overview:
Seeking a skilled Network Architect to design and configure network infrastructure for SCADA systems. Components involved will be Cisco IR1101 Routers, Schneider MCSESM123F2LG0 Switches, OnLogic IPCs and Rockwell license and Dongal License.

Key Responsibilities and Skills

• Create detailed network diagrams and configuration documentation.
• Proficiency in routing protocols, static routes, and NAT.
• Familiarity with industrial networks, SCADA systems, and OT security principles.
• Ability to troubleshoot complex network issues in multi-site environments.
• Validate routing and NAT configurations for multi-site communication.
• Ensure compliance with NIS and OT security standards.
• Adherence to Water OTASP standards including Asset Monitoring, Telemetry, Automation, and SCADA software design.
• Compliance with NIS Directive for critical infrastructure security.
• Knowledge of IEC 62443 cybersecurity framework for industrial control systems.
• Implementation of secure VLAN segmentation (VLAN 10 - OT/ICS, VLAN 20 - Management, VLAN 40 - SCADA).
• Experience with Azure AD integration for SCADA IPC authentication.
• Familiarity with security tools such as SIEM logging, Qualys vulnerability scanning, and Microsoft Defender.
• Ability to configure MPLS and IPSEC VPN tunnels for remote connectivity and backup links (4G failover).

Preferred Qualifications

• Cisco certifications (CCNA/CCNP).
• Experience with OT/ICS environments and SCADA integration.
• Knowledge of Firewall rule management and secure remote connectivity.