As an NRG employee, we encourage you to take charge of your career and development journey. We invite you to explore exciting opportunities across our businesses. You’ll find that our dynamic work environment provides variety and challenge. Your growth is key to our ongoing success—take the lead in shaping your career development, goals and future! Job Summary: <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 0.0in 12.0px;font-size:12.0pt;font-family:'Times New Roman', serif">The Critical Infrastructure Protection (CIP) Network Analyst has responsibility for maintenance, security, and CIP compliance of network equipment at the enterprise level. Scope includes network segmentation and VPN design, executing CIP compliance activities such as patch assessments on network equipment, change control, disaster recovery testing, cyber vulnerability assessments, and logical segmentation analysis. </li> </ul> Essential Duties/Responsibilities: <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 0.0in 12.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Network design and implementation for secure networks relating to NERC CIP compliance and cyber security of the fleet. </li> <li style="margin:0.0in 0.0in 0.0in 12.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Network segmentation and protection to meet compliance goals. </li> <li style="margin:0.0in 0.0in 0.0in 12.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Working independently, perform and/or coordinate all site-specific activities, tests and controls for meeting program requirements and ongoing compliance of Fortinet network infrastructure. </li> <li style="margin:0.0in 0.0in 0.0in 12.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Utilize tools such as FortiManager, FortiAnalyzer, FortiSIEM to monitor and maintain the operation and security of the Fortinet infrastructure.</li> <li style="margin:0.0in 0.0in 0.0in 12.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Assist in preparation for various audits and act as subject matter expert (SME)</li> <li style="margin:0.0in 0.0in 0.0in 12.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Lead the maintenance of the CIP network policies and procedures such as change control procedures, back-up, and disaster recovery plans.</li> <li style="margin:0.0in 0.0in 0.0in 12.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Serve as SME on hardware, software, and control architectures for CIP.</li> <li style="margin:0.0in 0.0in 0.0in 12.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Utilize best practices and knowledge of internal/external issues to improve or recommend technical or compliance solutions.</li> <li style="margin:0.0in 0.0in 0.0in 12.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Monitor electronic perimeters for potential breaches/vulnerabilities and act as first responder for any potential incident.</li> <li style="margin:0.0in 0.0in 0.0in 12.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Provide input for detailed analysis, diagnosis and mitigation based upon findings and deficiencies for operational or compliance issues.</li> <li style="margin:0.0in 0.0in 0.0in 12.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Through cross training, provide backup activities and response for the CIP team.</li> </ul> <h1 style="margin:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif;font-weight:bold">Working Conditions:</h1> <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="color:black;margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Majority of work by telecommuting</li> <li style="color:black;margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Open office environment, plant or datacenter as needed.</li> <li style="color:black;margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Some overtime required as special projects arise.</li> <li style="color:black;margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Travel up to 20%</li> </ul> Minimum Requirements: <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">2 years of experience operating and maintaining next generation firewalls. (Fortinet preferred)</li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">5 years of experience in implementation and administration of LAN/WAN/Internet networks and services.</li> </ul> Preferred Qualifications: <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif"><a name="_Hlk16504699"></a>Experience designing, securing, and maintaining networks using Fortinet Firewalls.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Experience maintaining security applications such as intrusion prevention, antivirus, patch assessment, security incident and event management (SIEM)</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Experience in a NERC CIP Low program development and execution</li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Experience with Routing, Switching, Datacenters, VPN, LAN, WAN, Wireless, Network Security, Intrusion Detection, and Anti-Virus.</li> </ul> <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Power industry or other industrial experience in an IT/OT environment.</li> </ul> <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Experience working with Ovation, T3000, Symphony +, or GE Control Systems</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:12.0pt;font-family:'Times New Roman', serif">Experience working with Nozomi, Dragos, Tenable OT, Darktrace, Claroty, or similar product.</li> </ul> Additional Knowledge, Skills and Abilities: <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="color:black;margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Working knowledge of cybersecurity and security tools</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Demonstrated ability to communicate (verbal and written) with all levels of internal and external customers.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Demonstrated project management skills.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Demonstrated ability to work independently and as a team member.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Demonstrated ability to set priorities and to respond to changing demands from multiple sources.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Ability to exercise discretion and independent judgment in applying established techniques, procedures, or standards.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Demonstrated analytical and problem-solving skills.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Ability to work in power plant, data center, or office environment as needed.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Experience maintaining servers.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Understanding of Citrix and VMWare</li> </ul> Physical Requirements: <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:12.0pt;font-family:'Times New Roman', serif">Occasionally requires lifting as appropriate to perform duties and responsibilities.</li> </ul> Salary offered will be commensurate with the successful candidate’s education and/or experience and consistent with the job location’s market pay rate. NRG Energy is committed to a drug and alcohol-free workplace. To the extent permitted by law and any applicable collective bargaining agreement, employees are subject to periodic random drug testing, and post-accident and reasonable suspicion drug and alcohol testing. EOE AA M/F/Protected Veteran Status/Disability. Level, Title and/or Salary may be adjusted based on the applicant's experience or skills. EEO is the Law Poster (The poster can be found at http://www.eeoc.gov/employers/upload/poster_screen_reader_optimized.pdf) Official description on file with Talent.

CIP Compliance Network Engineer (Princeton, NJ, US, 08540) @ NRG

About this role

Ready to apply?