Network Segmentation Jobs in Kentucky (NOW HIRING)

The Stellix Group of companies share a common mission of providing transformative solutions at the intersection of science and technology that enable our customers to deliver a healthier and more sustainable future. Our unique portfolio of companies is focused on helping life sciences and industry manufacturers build, connect, and transform operations and IT to make real progress in breakthrough therapeutics, food, energy, and more.

Stellix is seeking a Senior IT/OT Engineer to design, build, and secure converged IT/OT environments for clients across Life Sciences and Critical Infrastructure. This is a client-facing delivery and consulting role: you will lead technical architecture, hands-on implementation, and commissioning of industrial control systems, virtualization platforms, and OT cybersecurity controls.

As a senior member of the team, you will balance deep technical execution with mentorship, proposal support, and standardization of repeatable engineering practices. The ideal candidate is a genuine IT/OT generalist — equally comfortable in a control system cabinet, a hypervisor console, and a network segmentation design review.

• Design, configure, and commission distributed control and SCADA systems, including DeltaV and FactoryTalk environments.
• Lead and document Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT) in line with ASTM E2500 and client validation requirements.
• Integrate control systems with plant historians, OT networks, and supervisory layers while preserving system integrity and validated states.
• Architect and deploy virtualization and hyperconverged infrastructure using Proxmox VE and VMware, including cluster design, storage, and high availability.
• Specify and stand up server and network hardware (e.g., Dell PowerEdge R660 class) for industrial and edge deployments.
• Develop standardized, repeatable build guides, networking diagrams, and configuration baselines for client and internal use.

• Assess and harden OT environments against recognized frameworks, including SANS IC Critical Controls and IEC 62443.
• Design and implement network segmentation, secure remote access, patch and backup strategies, and asset inventory practices for OT.
• Support OT cybersecurity assessments and roadmap development, translating findings into prioritized, qualified remediation plans

Client Delivery & Consulting

• Serve as a technical lead on client engagements, from scoping and design through implementation, testing, and handover.
• Contribute to proposals, statements of work, and technical estimates for Life Sciences and Critical Infrastructure opportunities.
• Produce clear, audit-ready documentation and present technical findings to client stakeholders ranging from plant engineers to IT leadership.
• Mentor junior engineers and review technical deliverables for quality and consistency.
• Drive reusable engineering standards, templates, and tooling that improve delivery efficiency and accuracy.

• Bachelor's degree in Engineering, Computer Science, or a related technical field, or equivalent practical experience.
• 7+ years of combined IT and OT engineering experience, including hands-on work in industrial or regulated environments.
• Demonstrated experience with industrial control systems such as DeltaV and FactoryTalk.
• Proven experience with virtualization platforms (Proxmox, VMware) and server/network infrastructure.
• Working knowledge of OT cybersecurity frameworks (SANS IC Critical Controls, IEC 62443) and network segmentation principles.
• Strong documentation skills and experience with structured testing methodologies (FAT/SAT, ASTM E2500).
• Excellent communication skills and the ability to lead client-facing technical discussions.

• Experience delivering projects in Life Sciences (GMP/validated environments) or Critical Infrastructure sectors.
• Familiarity with hyperconverged infrastructure design and edge computing deployments.
• Relevant certifications (e.g., GICSP, CISSP, Cisco/CCNA, VMware VCP, or vendor IC certifications).
• Experience with automation, scripting, or AI-assisted tooling for engineering documentation.

In the first year, this engineer will lead the technical delivery of multiple client engagements, establish or refine reusable build and assessment standards, and serve as a trusted technical advisor across both the internal team and client stakeholders.

Here's What You'll Get

• Highly competitive Medical, Dental, and Vision Insurance
• Flexible Spending or Health Savings Accounts
• Unlimited Vacation Time
• 10 Paid Holidays
• 12 Paid Weeks Birthing Parent Leave
• Pet Insurance
• Retirement Savings: 401(k) and Employee Stock Ownership Plan
• Employee Referral Bonus
• Professional Development Reimbursement
• Company Paid STD, LTD, and Life Insurance

Compensation: This position offers a base salary range of $110,000 to $150,000, based on experience and qualifications. The role is also eligible for a variable compensation plan.

The posted salary range represents a good faith estimate of the expected compensation for this role at the time of posting. Final compensation will be determined based on factors such as relevant experience, skills, qualifications, internal equity, and business needs.

On-Site Requirements

This position requires a full on-site presence 5 days per week during the first 4-6 months. Following that period, the role will be on-site four days per week, including Monday, Wednesday, and Thursday, with the fourth on-site day alternating between Tuesday or Friday depending on business needs.

Must be currently authorized to work in the United States.

Policy on Third-Party Unsolicited Resume Submissions: Please note that any third-party unsolicited resume submissions will immediately become the property of Stellix. Stellix will not pay any fee to a submitting employment agency, person, or entity unless a signed agreement is established.

Please Note: Stellix is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability, protected veteran status or any other characteristic protected by law.