Design and implement a segmented OT network architecture transitioning from flat Layer 2 networks to SD-WAN-enabled, zone-based architectures. * Define network segmentation strategy (ISA/IEC 62443 ...
Design and implement a segmented OT network architecture transitioning from flat Layer 2 networks to SD-WAN-enabled, zone-based architectures. * Define network segmentation strategy (ISA/IEC 62443 ...
Design and implement a segmented OT network architecture transitioning from flat Layer 2 networks to SD-WAN-enabled, zone-based architectures. * Define network segmentation strategy (ISA/IEC 62443 ...
Design and implement a segmented OT network architecture transitioning from flat Layer 2 networks to SD-WAN-enabled, zone-based architectures. * Define network segmentation strategy (ISA/IEC 62443 ...
Network Engineer III
Chesapeake, VA ยท On-site
Network security, segmentation, and firewalls โข Hands-on experience with: Cisco (ACI), Aruba โข Hands-on experience with: Fortinet / Palo Alto โข Hands-on experience with: F5 (load balancing) โข ...
Network Engineer III
Chesapeake, VA ยท On-site
Network security, segmentation, and firewalls โข Hands-on experience with: Cisco (ACI), Aruba โข Hands-on experience with: Fortinet / Palo Alto โข Hands-on experience with: F5 (load balancing) โข ...
Network Engineer with Security Clearance
Virginia Beach, VA ยท On-site
$135K - $150K/yr
Implement boundary defense solutions and network segmentation. * Maintain firewall rules and access controls. * Support cybersecurity audits, vulnerability remediation, and RMF compliance. * Monitor ...
New
Network Engineer with Security Clearance
Virginia Beach, VA ยท On-site
$135K - $150K/yr
Implement boundary defense solutions and network segmentation. * Maintain firewall rules and access controls. * Support cybersecurity audits, vulnerability remediation, and RMF compliance. * Monitor ...
New
Network Engineer III
Chesapeake, VA ยท Hybrid
$99K - $111K/yr
Network segmentation initiatives * Cloud network integration * Data center network upgrades Documentation & Standards * Maintain architecture diagrams and technical documentation * Establish ...
Network Engineer III
Chesapeake, VA ยท Hybrid
$99K - $111K/yr
Network segmentation initiatives * Cloud network integration * Data center network upgrades Documentation & Standards * Maintain architecture diagrams and technical documentation * Establish ...
Network Designer (Experienced, Senior or Lead)
Herndon, VA ยท Hybrid
$106K - $146K/yr
Design and maintain logical network segmentation to ensure isolation, scalability, and compliance with enterprise authorization and accreditation practices * Configure and test network failover ...
Network Designer (Experienced, Senior or Lead)
Herndon, VA ยท Hybrid
$106K - $146K/yr
Design and maintain logical network segmentation to ensure isolation, scalability, and compliance with enterprise authorization and accreditation practices * Configure and test network failover ...
Network Designer (Experienced, Senior or Lead)
Herndon, VA ยท Hybrid
$139K/yr
Design and maintain logical network segmentation to ensure isolation, scalability, and compliance with enterprise authorization and accreditation practices * Configure and test network failover ...
Network Designer (Experienced, Senior or Lead)
Herndon, VA ยท Hybrid
$139K/yr
Design and maintain logical network segmentation to ensure isolation, scalability, and compliance with enterprise authorization and accreditation practices * Configure and test network failover ...
Network Designer (Experienced, Senior or Lead)
Herndon, VA ยท On-site
$102K - $139K/yr
Design and maintain logical network segmentation to ensure isolation, scalability, and compliance with enterprise authorization and accreditation practices * Configure and test network failover ...
Network Designer (Experienced, Senior or Lead)
Herndon, VA ยท On-site
$102K - $139K/yr
Design and maintain logical network segmentation to ensure isolation, scalability, and compliance with enterprise authorization and accreditation practices * Configure and test network failover ...
Network Engineer III
Chesapeake, VA ยท On-site
$99K - $111K/yr
Network segmentation initiatives * Cloud network integration * Data center network upgrades Documentation & Standards * Maintain architecture diagrams and technical documentation * Establish ...
Network Engineer III
Chesapeake, VA ยท On-site
$99K - $111K/yr
Network segmentation initiatives * Cloud network integration * Data center network upgrades Documentation & Standards * Maintain architecture diagrams and technical documentation * Establish ...
Design and maintain logical network segmentation to ensure isolation, scalability, and compliance with enterprise authorization and accreditation practices * Configure and test network failover ...
Design and maintain logical network segmentation to ensure isolation, scalability, and compliance with enterprise authorization and accreditation practices * Configure and test network failover ...
Network Designer (Experienced, Senior or Lead)
Herndon, VA ยท Hybrid
$106K - $146K/yr
Design and maintain logical network segmentation to ensure isolation, scalability, and compliance with enterprise authorization and accreditation practices * Configure and test network failover ...
Network Designer (Experienced, Senior or Lead)
Herndon, VA ยท Hybrid
$106K - $146K/yr
Design and maintain logical network segmentation to ensure isolation, scalability, and compliance with enterprise authorization and accreditation practices * Configure and test network failover ...
Network Administrator
Fairfax, VA ยท On-site
Manage VLANs, VPNs, network segmentation, and access control mechanisms * Maintain network documentation, diagrams, configurations, and standard operating procedures * Perform system upgrades ...
Quick apply
Network Administrator
Fairfax, VA ยท On-site
Manage VLANs, VPNs, network segmentation, and access control mechanisms * Maintain network documentation, diagrams, configurations, and standard operating procedures * Perform system upgrades ...
Design and maintain logical network segmentation to ensure isolation, scalability, and compliance with enterprise authorization and accreditation practices * Configure and test network failover ...
Design and maintain logical network segmentation to ensure isolation, scalability, and compliance with enterprise authorization and accreditation practices * Configure and test network failover ...
Design and maintain logical network segmentation to ensure isolation, scalability, and compliance with enterprise authorization and accreditation practices * Configure and test network failover ...
Design and maintain logical network segmentation to ensure isolation, scalability, and compliance with enterprise authorization and accreditation practices * Configure and test network failover ...
Field Network Engineer
Arlington, VA ยท On-site
Implement and maintain network segmentation using VRFs, VLANs, and firewall policies to isolate ITS traffic domains. * Support agency's traffic signal control systems, CCTV/video surveillance ...
Field Network Engineer
Arlington, VA ยท On-site
Implement and maintain network segmentation using VRFs, VLANs, and firewall policies to isolate ITS traffic domains. * Support agency's traffic signal control systems, CCTV/video surveillance ...
Network Administrator
Fort Belvoir, VA ยท On-site
$92K - $166K/yr
Familiarity with Zero Trust network segmentation and micro-segmentation. * Experience supporting large-scale enterprise data, analytics, or platform services in secure environments. * Experience with ...
Network Administrator
Fort Belvoir, VA ยท On-site
$92K - $166K/yr
Familiarity with Zero Trust network segmentation and micro-segmentation. * Experience supporting large-scale enterprise data, analytics, or platform services in secure environments. * Experience with ...
Network Architect
Fort Belvoir, VA ยท On-site
$92K - $166K/yr
Familiarity with Zero Trust network segmentation and micro-segmentation. * Experience supporting large-scale enterprise data, analytics, or platform services in secure environments. * Experience with ...
Network Architect
Fort Belvoir, VA ยท On-site
$92K - $166K/yr
Familiarity with Zero Trust network segmentation and micro-segmentation. * Experience supporting large-scale enterprise data, analytics, or platform services in secure environments. * Experience with ...
Implement secure network segmentation for mission, administrative, management, wireless, guest, and other enclaves using VLANs, VRFs, VXLAN overlays, ACLs, and routing policy. * Configure and ...
Implement secure network segmentation for mission, administrative, management, wireless, guest, and other enclaves using VLANs, VRFs, VXLAN overlays, ACLs, and routing policy. * Configure and ...
Maintain firewalls, routing and switching configurations, ACLs, network segmentation, QoS, and network access control (NAC). Confirm DNS/DHCP integrity, maintain IPAM updates, and coordinate ...
Maintain firewalls, routing and switching configurations, ACLs, network segmentation, QoS, and network access control (NAC). Confirm DNS/DHCP integrity, maintain IPAM updates, and coordinate ...
Senior Network Engineer
Fort Belvoir, VA ยท On-site
$117K - $161K/yr
Familiarity with Zero Trust network segmentation and micro-segmentation. * Experience supporting large-scale enterprise data, analytics, or platform services in secure environments. * Experience with ...
Senior Network Engineer
Fort Belvoir, VA ยท On-site
$117K - $161K/yr
Familiarity with Zero Trust network segmentation and micro-segmentation. * Experience supporting large-scale enterprise data, analytics, or platform services in secure environments. * Experience with ...
Network Segmentation information
What is the difference between Network Segmentation vs Network Security Engineer?
| Aspect | Network Segmentation | Network Security Engineer |
|---|---|---|
| Primary Focus | Dividing a network into segments to control traffic | Designing, implementing, and managing security measures |
| Required Skills | Networking protocols, VLANs, firewalls | Firewall configuration, intrusion detection, security policies |
| Work Environment | Network infrastructure, data centers, enterprise networks | Security teams, IT departments, cybersecurity environments |
| Certifications | CCNA, CompTIA Network+ | CISSP, CEH, CompTIA Security+ |
Network segmentation involves dividing a network into smaller parts to improve performance and security, while a Network Security Engineer focuses on protecting the network through security measures. Both roles require networking knowledge, but their primary objectives differ: segmentation manages network structure, whereas security engineers safeguard it from threats.
What are the key skills and qualifications needed to thrive in a Network Segmentation role, and why are they important?
What kind of jobs can I get with Network+?
Is networking a high paying job?
What is network segmentation?
What are some common challenges faced by professionals working in network segmentation roles, and how can they be addressed?
What are network segmentations?
What is job segmentation?

Other
Posted 7 days ago
Job description
Title
Senior OT Network Architect
Duration
6 Months
No. of Positions
1
Type of Hire
Contract to Hire
Work Authorization
Citizen
Work Location
Manassas, VA
In-Office Requirement
Must work onsite- no remote- no exceptions
Job Description
Architecture & Design
- Design and implement a segmented OT network architecture transitioning from flat Layer 2 networks to SD-WAN-enabled, zone-based architectures.
- Define network segmentation strategy (ISA/IEC 62443 zones and conduits model) to isolate critical OT assets and control east-west traffic.
- Engineer ring and/or resilient topologies across substations and core OT sites to ensure deterministic communication and fault tolerance.
- Develop SD-WAN design standards including:
- Underlay/overlay architecture
- Path selection policies (latency, jitter, packet loss)
- QoS for ICS protocols (e.g., DNP3, Modbus, IEC 61850)
Security & Compliance
- Develop and enforce OT-specific cybersecurity controls, including micro-segmentation, firewall zoning, and least-privilege access.
- Define and implement firewall policies to restrict inter-zone communication and prevent unauthorized access to OT systems.
- Conduct risk and vulnerability assessments aligned with OT threat models (ransomware, lateral movement, supply chain risks).
- Ensure compliance with NERC CIP standards and other applicable frameworks.
Implementation & Operations
- Lead deployment of SD-WAN solutions across OT sites, including integration with existing switching infrastructure (e.g., industrial-grade switches).
- Configure and maintain high availability mechanisms:
- Redundant paths and failover (active/active or active/standby)
- Rapid spanning tree / ERPS / MPLS-TP where applicable
- Support incident response and root cause analysis for OT network disruptions.
- Manage projects and deliver on time with periodic status reports to management.