Operational Technology Network Enigneer/Consultant

At Sword, we help power, secure and transform the organisations that keep the UK running. Supporting customers across Critical National Infrastructure, energy, public sector and enterprise markets, we combine deep industry expertise with leading technology services spanning managed services, cyber security, cloud, data, AI and digital transformation.

Join Sword and you'll be part of a team solving complex challenges, delivering real-world impact and working alongside talented colleagues who care deeply about quality, collaboration and customer success.

About the Role:

• Design and implement secure OT network architectures. Configure and manage firewalls, switches, routers and secure remote access solutions.
• Develop and implement network segmentation between IT, OT and safety-critical environments.
• Support deployment of industrial DMZs, security zones and conduits.
• Configure VLANs, routing, access controls and network security policies.
• Support firewall policy design, rule reviews and optimisation.
• Implement secure connectivity for OT applications, servers, engineering workstations and industrial systems.
• Support network migrations, upgrades and infrastructure refresh programmes. Undertake network testing, validation and performance analysis. Support FAT, SAT, commissioning and production go-live activities.
• Troubleshoot complex network, connectivity and firewall issues.
• Support network hardening, vulnerability remediation and security improvement activities.
• Produce HLDs, LLDs, network diagrams, firewall rule sets, test plans and as-built documentation.
• Work alongside OT, cyber security, infrastructure, application and engineering teams.
• Provide technical consultancy and guidance to customers on OT network security and resilience.

Requirements

• Strong hands-on experience with enterprise and industrial networking. Strong experience configuring and managing next-generation firewalls.
• Experience with platforms such as Palo Alto Networks, Fortinet, Cisco or Check Point. Strong understanding of firewall policies, NAT, VPNs, IPS/IDS and application-based security controls.
• Experience designing and implementing OT network segmentation and industrial DMZs. Strong knowledge of VLANs, routing, switching, TCP/IP, DNS and network services.
• Experience with Cisco switching and routing technologies.
• Experience supporting secure remote access and privileged connectivity into OT environments.
• Understanding of industrial protocols. Experience with network monitoring, packet analysis and troubleshooting tools.
• Experience with high availability, redundant networking and resilient network architectures.
• Knowledge of network access control, identity-based access and zero trust principles.
• Experience with network testing, validation and acceptance activities.
• Experience producing technical network and security documentation.
• Experience within OT, industrial, energy, utilities or CNI environments would be highly desirable.
• Knowledge of IEC 62443, Purdue Model, NCSC CAF, NIST or other OT security frameworks would be advantageous.