IT / OT Network Administrator II

Genesis Energy, L.P. is seeking an experienced IT / OT Network Administrator II to join our Corporate IT Infrastructure team in Houston. This role reports to Corporate IT and serves as a technical resource for IT and OT network architecture and security. The Network Administrator II works independently and collaboratively with Pipeline Operations, Control Room, and Engineering teams to support the design, implementation, maintenance, and security of IT and Operational Technology (OT) networks supporting Genesis's onshore and offshore midstream assets, including pipelines, terminals, and offshore platforms in the Gulf of America. This role operates as a senior individual contributor and collaborates closely with Infrastructure, Security, and Operations leadership.

Key Duties:

• Designs, implements, and supports IT and OT network infrastructure in a distributed environment including architecture design, implementation, maintenance, monitoring, documentation, upgrades, troubleshooting, and tiered support; independently resolves complex issues and serves as an escalation point for Level I staff.
• Performs advanced monitoring and analysis of network and server performance (e.g. traffic connect time, transmission speeds, packet sizes, and throughput); diagnoses complex root-cause issues, implements configuration changes, and develops recommendations for long-term capacity and reliability improvements.
• Updates network-related software and firmware to maintain compliance with company standards and regulations.
• Designs, implements, and enforces segmentation and security of control system networks (SCADA, PLCs, RTUs) in accordance with IEC 62443 / ISA-99 and TSA Pipeline Security Directives; leads zone-and-conduit architecture reviews and documents security posture.
• Coordinates audits of field sites and supporting data center infrastructure; partners with Operations and IT to validate controls, identify gaps, prioritize remediation, and drive compliance with regulatory and company standards.
• Coordinates with Pipeline Control Room, Measurement, and Automation teams on network changes affecting control system availability.
• Maintains and enhances the IT/OT DMZ and jump-host architecture consistent with the Purdue Reference Model; evaluates architecture changes, advises on improvements, and ensures configurations remain aligned with current security standards.
• Physically installs and maintains datacenter and remote site hardware.
• Compiles and maintains diagrams, documentation, records, and reports concerning network implementation, operations, and maintenance.
• Performs network configuration changes for various equipment such as routers, switches, firewalls, VPN, Wi-Fi, and SAN switching to enhance performance.
• Provides 24-hour emergency support, serves as senior resource in the on-call network support rotation, and acts as primary escalation contact for critical network outages affecting SCADA or pipeline operations.
• Participates in monthly and as needed server patching rotation.
• Travels to provide regional and offshore support of remote networks.
• Supports and executes response and remediation activities for network security incidents, including containment, root-cause analysis, post-incident review, and corrective action implementation.
• Owns and maintains network standards, change management procedures, and technical runbooks; ensures documentation is current, peer-reviewed, and accessible to the broader team.
• Manages vendor relationships, evaluates technology solutions, leads proof-of-concept efforts, and provides technical recommendations that inform purchasing decisions and strategic roadmap planning.
• Supports occasional ad hoc reporting or data requests related to network operations as needed

Required Skills, Experience, and Education:

• Minimum 5 years of experience administering IT and/or OT networking, firewall, and security solutions, including demonstrated experience in a senior individual contributor or technical lead capacity
• Minimum 3 years of experience in oil & gas, midstream, or other critical infrastructure sectors with demonstrated knowledge of pipeline operations and OT environments.
• Bachelor's Degree, or equivalent, preferred
• Advanced knowledge of network administration - Ethernet switching, TCP/IP subnetting and routing (static, dynamic, BGP, OSPF, EIGRP), DHCP, DNS, QoS, and Cisco network equipment; demonstrated ability to design and implement complex multi-site network architectures.
• Willingness to travel by vehicle and offshore by helicopter
• Strong written and verbal communication skills, including the ability to produce clear technical documentation and communicate effectively in person, by phone, and via radio.
• Ability to obtain a TWIC (Transportation Worker Identification Credential) for port and offshore facility access.
• Ability to pass pre-employment, random, post-incident, and reasonable suspicion drug and alcohol testing in accordance with DOT/PHMSA and company policy.
• Hands-on experience with OT and IT monitoring platforms (SolarWinds, Dragos, Claroty, Nozomi) in a production environment; ability to configure, tune, and interpret alerts from these platforms.
• Experience with industrial automation vendors (Rockwell/Allen-Bradley, Schneider, Emerson, ABB) from a networking perspective, preferred
• System administration experience with VMware, Cisco, Microsoft System Center, preferred
• Active GICSP (Global Industrial Cyber Security Professional) certification, or equivalent (CCNP Security, CISSP, or CompTIA Security+); additional ICS/OT-specific certifications (e.g., ISA/IEC 62443 Cybersecurity Certificate) strongly valued, preferred
• Working knowledge of TSA Pipeline Security Directives (SD Pipeline-2021-01/02 series) and TSA Security Guidelines for pipeline operators; experience applying these requirements in an operational environment, preferred
• Working knowledge of API 1164 (Pipeline SCADA Cybersecurity) and NIST Cybersecurity Framework, with demonstrated ability to apply these frameworks to assess gaps and implement controls in an OT environment, preferred
• Knowledge of securing and monitoring IDS/IPS and SCADA Control Systems, preferred
• Experience supporting network and OT security assessments and remediation activities, preferred
• Windows and Linux server administration experience, preferred
• Demonstrated experience applying IEC 62443 / ISA-99 standards to design and implement network segmentation and security zones in an industrial control system environment, preferred
• Experience in network infrastructure projects end-to-end, including scoping, vendor coordination, change management, implementation, and post-deployment validation, preferred
• Ability to work independently with minimal supervision
• Strong analytical and technical problem-solving skills
• Ability to interact and communicate effectively across IT and Operations teams
• Flexibility to work overtime when needed, nights, and weekends when needed (incident response / maintenance windows).
• Travel requirements up to 30%; including offshore by helicopter
• Onsite presence required at the Houston corporate office downtown

Genesis Energy is an equal opportunity employer. All employment decisions are made without regard to sex, race, color, religion, national origin, citizenship, age, disability, marital or veteran status, sexual orientation, gender identity or expression, or any other legally protected categories. This includes providing reasonable accommodation for employee's and applicant's disabilities or religious beliefs and practices. Alternative methods of applying for employment are available to individuals unable to apply through this site because of a disability. Contact Genesis Human Resources to discuss reasonable accommodations by sending an email to hr@genlp.com.