Engineer/Senior Engineer, Network/Server OT

Engineer/Senior Engineer, Network/Server OTLocation: TerraForm Power Remote Operations Center, Albany NYAbout UsTerraForm Power is a leading owner, operator, and producer of renewable energy across North America. As a portfolio company of Brookfield Renewable, we own and operate approximately 2,200 MW of utility-scale wind, solar, and battery energy storage facilities across 15 U.S. states and Ontario, Canada. Headquartered in New York City, TerraForm Power is committed to delivering reliable, innovative renewable energy solutions that help customers achieve their clean energy goals. Our experienced team manages every aspect of our operations – from power generation and asset management to commercial energy solutions – ensuring the safe, reliable, and efficient performance of our renewable energy facilities. At TerraForm Power, our people are at the heart of our success. We foster a culture built on safety, integrity, collaboration, innovation, and continuous improvement, while investing in the development of our employees and supporting the communities where we operate through environmental stewardship, charitable giving, and meaningful local partnerships. If you're passionate about renewable energy and want to make a lasting impact on the future of clean power, we invite you to join our team.Job SummaryWe are seeking a hands-on Network/Server OT Engineer to design, secure, and operate the network and server infrastructure that powers our renewable energy portfolio (wind, solar, battery storage), including our TerraForm Power Remote Operation Center (T-ROC) and remote generation sites. The successful candidate will own the lifecycle of OT systems across HP/HPE/Intel servers, Synology NAS, Microsoft/VMware virtualization, certain AWS cloud services, and security tooling used to monitor and control grid-connected assets.ResponsibilitiesArchitecture, Design & ImplementationDesign and implement secure, resilient network and server architectures for T-ROC and support field sites (wind, solar, battery storage).Evaluate and introduce new technologies (hardware, software, cloud, security) that improve reliability, scalability, and compliance; create solution designs, reference architectures, and implementation plans.Build and support virtualized environments (VMware/Hyper-V), Windows Server, Azure and AWS environments as required for OT environments.Configure and manage HP/HPE/Intel or similar server platforms and Synology NAS and similar for storage, backup, and replication; optimize performance and capacity planning.Remote Operations Center (T-ROC) OperationsSupport T-ROC infrastructure, including EMS/SCADA networks, historian, time synchronization (NTP/PTP), and reliable telemetry high availability, redundancy, and failover across T-ROC and remote sites; manage DR/BCP strategies, tabletop exercises, and recovery runbooks.Collaborate with Operations, Compliance, and Asset Management to align changes with grid operations, dispatch needs, and regulatory & Compliance (NERC CIP / OT Security)Working with IT and Compliance, maintain security controls aligned to NERC CIP, with practical application in OT environments.Design and enforce network segmentation between IT and OT, least-privilege access, MFA, secure remote/vendor access, and Zero Trust principles where applicable.Lead/participate in incident response, cyber event triage, and post-incident reviews; maintain playbooks and test recovery procedures.Own technical evidence for network/server controls (configs, logs, diagrams, test records) and support internal and external audits as SME.Monitoring, Telemetry & Change ManagementDeploy and maintain monitoring/observability across servers, network devices, applications, and site configuration management, baseline verification, and change management processes that adhere to NERC CIP (including approvals, testing, back-out plans, and evidence).Maintain accurate OT inventories (hardware, software, firmware), network diagrams, data flow maps, and access lists; ensure audit-ready & SupportProvide support for OT network/server issues, perform root cause analysis, and drive corrective actions.Schedule and execute maintenance windows, firmware/patch cycles, and lifecycle refresh plans.Coordinate with vendors and OEMs for support, RMA, security advisories, and product roadmaps.Collaboration across IT, OT, Compliance, Operations, Asset Management, Operations, and external partners.Required QualificationsEngineerBachelor's degree in Computer Science, Electrical/Computer Engineering, Information Systems, or related field; or equivalent practical experience.5+ years managing enterprise networks and servers (Windows/Linux), including virtualization (VMware/Hyper-V), storage/NAS (Synology or similar), and core Microsoft services (AD, DNS, DHCP, GPO, PKI).Hands-on experience with server platforms (deployment, firmware/low level management such as ILO, performance tuning).Strong knowledge of routing/switching, VLANs, ACLs, VPNs, NAT, QoS, BGP/OSPF, and secure remote access.Working knowledge of AWS and Azure networking and security.Experience implementing security monitoring, patch management, and backup/restore for servers and NAS.Familiarity with NERC CIP concepts for Low Impact assets and Medium Impact control centers, plus OT fundamentals.Proficiency with scripting/automation (PowerShell, Bash, Python) for configuration, monitoring, and evidence collection.Strong communication skills—able to translate technical requirements for operations, compliance, and executive stakeholders.A strong personal commitment to continuous improvementValue excellence in safety and environmental performanceAbility to travel to remote generation sites (wind/solar/storage), substations as needed (~10%).Participate in on-call rotation and planned after-hours maintenance windows.Ability to lift and install 50+lbsSenior EngineerAll of the above, plus:10+ years experience spanning IT/OT environments.Experience with direct responsibility for control center infrastructure.Demonstrated leadership in architecture, program design, audit readiness, and cross-functional stakeholder management.Proven track record implementing defense-in-depth and segmentation for OT networks, vendor remote access, and interconnection security (e.g., ICCP/TASE.2).Ability to set standards, mentor engineers, and drive large-scale changes across diverse sites.PreferredBackground in battery storage communications and site control systems; knowledge of inverter/plant controller vendor ecosystems.Exposure to Zero Trust, micro-segmentation, and Privileged Access Management in industrial or utility OT environments.Experience with SOAR, configuration drift detection, and compliance evidence /Control: SNMP/Syslog/NetFlow, Windows Eventing, OT telemetry integrations, SCADA/EMS monitoring.Automation: PowerShell, Python, Ansible (optional), Git., Bash, BatchCompensation: $120,000-$140,000 USD, bonus eligibleA note to Recruiting Agencies, TerraForm Power Human Resources team does not accept unsolicited resumes from third party recruiters, staffing firms, or related agencies. The Human Resources team coordinates all recruiting and hiring at our company. We do not accept resumes from third-party recruiters unless authorized by the Human Resources team and if a signed agreement is in place. Any unsolicited resumes will be considered property of TerraForm Power and we are not responsible for any related fees. All communication related to recruiting partnerships should ONLY be directed to the Human Resources team.Equal Opportunity Employer This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.