Senior IT/OT Support Engineer

About the Position

We are looking for a Senior IT/OT Support Engineer to join Direct Network Solutions, an MSSP integrator and service provider specializing in IT/OT security and network infrastructure for companies in the renewable energy sector. Our team works at the intersection of traditional IT and OT (Operational Technology), with direct impact on the operation of solar and wind farms, as well as energy dispatch infrastructure. We are in active growth and are looking for senior engineers who want to build something substantial - not just maintain what already exists.

Responsibilities

• Security & Infrastructure – Renewable Energy Sector
  • Take full technical ownership of IT/OT security projects - from initial design through final acceptance and documentation
  • Design and implement network and security architectures for solar and wind farms, as well as energy dispatch infrastructure
  • Configure and optimize Fortinet ecosystems: FortiGate, FortiManager, FortiAnalyzer, FortiExtender - including complex SD-WAN and IPSec policies
  • Deploy and operate OT monitoring solutions using Nozomi Networks (Guardian, Vantage, Arc) and administer the ThreatLocker Cyber Hero MDR platform
  • Provide senior-level post-implementation support: root cause analysis, security policy tuning, and performance optimization
  • Respond to security incidents as L3 escalation - including OT/SCADA incidents at critical infrastructure clients
  • Mentor team engineers and build internal procedures, runbooks, and technical reference documentation
  • Contribute to technical pre-sales: proposed architectures, effort estimation, risk assessment, and response to technical specifications (RFPs/tender documents)
  • Collaborate with the SOC/NOC team on alert correlation across FortiAnalyzer, Wazuh SIEM, and Nozomi.

Requirements

• Senior Profile: Unlike a mid-level engineer, at Direct Network Solutions a senior takes full technical ownership of projects, makes architectural decisions independently, mentors colleagues, and represents the company in technical discussions with clients and vendors. We are not looking for someone who executes tasks - we are looking for someone who defines how things are done right.
• Location: Romania - On-site to the clients + partially remote work (hybrid)
• Contract Type: Full-time – Permanent position
• Experience: Minimum 5 years, preferably 7+ years in IT infrastructure/security
• Domain: Networks – IT Security – OT/SCADA – Renewable Energy
• Language: Romanian (mandatory) – English at an advanced level (technical)
• Experience: Minimum 4 years in electrical execution or maintenance
• Oncall: Rotating on-call schedule for critical client incidents
• Transportation: Company car or reimbursement – Category B driving license required

Technical Experience (mandatory):

• Minimum 5 years of proven experience in network administration, IT security, or enterprise infrastructure
• Fortinet - advanced level: FortiGate (complex policies, SD-WAN, IPSec IKEv2, HA clustering), FortiManager, FortiAnalyzer
• Strong networking fundamentals: TCP/IP, VLANs, BGP/OSPF routing, switching, QoS, site-to-site and remote access VPN
• Experience with enterprise firewalls in production environments, not just lab settings - including troubleshooting under pressure
• Advanced log analysis: interpreting security alerts, correlating events, and distinguishing false positives from real incidents
• Fortinet NSE4 certification - mandatory; NSE5 FortiManager/FortiAnalyzer is a significant advantage.

OT/Industrial Experience (significant advantage):

• Exposure to OT networks or industrial environments: SCADA, PLC, HMI, RTU
• Familiarity with industrial protocols: Modbus TCP, DNP3, IEC 60870-5-104, IEC 61850, OPC-UA
• Understanding of Purdue Model architectures and IT/OT segmentation
• Experience in the energy sector: wind/solar farms, energy dispatch, ANRE regulations.

Additional Competencies

• Nozomi Networks: Guardian configuration, alert interpretation, OT asset inventory
• ThreatLocker: application whitelisting policy administration, Cyber Hero MDR
• SIEM: Wazuh, Elastic or equivalent - detection rule creation, dashboards
• Scripting for automation: Python or Bash - not mandatory, but makes a difference
• Advanced technical English: vendor documentation, communication with international support teams, technical specifications.

Personal Profile

• You make technical decisions independently and take ownership of them
• Calm and methodical under pressure - an OT incident at a wind farm means real financial losses for the client
• You document everything you do - the runbooks and procedures you write are the ones the team relies on
• Proactive in identifying risks - you don't wait for something to break before proposing an improvement
• Strong technical communicator - you can explain a complex problem to both a fellow engineer and a non-technical client
• Available for on-site travel across Romania - client sites are located in various locations

We Offer

• Competitive senior compensation package - negotiable based on experience and certifications
• Meal vouchers
• 23 days of annual leave, plus a day off on your birthday
• Health insurance, life insurance, and a comprehensive medical services package
• Real projects in critical infrastructure - no sandboxes, no simulations. You work on systems that power the electrical grid
• Full certification support: NSE5/NSE7 Fortinet, GICSP, ISA/IEC 62443, or other relevant certifications - time and budget covered
• Company car or full travel reimbursement for all on-site visits
• Small team, fast decisions - good technical proposals get implemented
• Clear growth path toward architect / tech lead as the team scales - the role is designed to grow with you
• Hybrid flexibility - remote where the nature of the work allows, on-site where it matters

About the Company

We are an MSSP integrator and service provider specializing in IT/OT security and network infrastructure for companies in the renewable energy sector. We deliver and operate critical infrastructure based on Fortinet, Nozomi Networks, and ThreatLocker, covering the full lifecycle: design, implementation, SOC monitoring, and incident response.