FuelCell Energy’s Global Infrastructure team is seeking a Senior Network and Cybersecurity Engineer to help own the company network and its security across corporate offices, manufacturing facilities, Microsoft Azure, and OT environments. This is a hybrid role based in Danbury, CT with a defined onsite and remote schedule.
Role Focus
In this position, you will be responsible for network engineering, Azure security and hybrid connectivity, and infrastructure operations. You will serve as a senior technical escalation point for complex network, connectivity, and security issues, while leading infrastructure and security initiatives from planning through delivery.
Key Responsibilities
- Own the design, implementation, and support of the company network infrastructure, including LAN, WAN, wireless, firewalls, VPN, and connectivity to Azure.
- Develop and maintain a network roadmap that supports reliable, secure, and scalable connectivity across all company facilities.
- Act as the senior escalation point for complex network, connectivity, and security issues.
- Design and secure Azure networking and hybrid connectivity, applying Zero Trust and least-privilege principles.
- Implement and continuously improve security controls across Azure and the network, partnering with the cybersecurity team on identity, monitoring, and threat detection.
- Support secure segmentation and remote access between IT and OT environments to help protect the availability and safety of production systems.
- Lead infrastructure and security projects from planning through delivery.
- Manage patching and vulnerability remediation for network and security infrastructure, and support incident response, disaster recovery, and audit activities including SOX.
- Maintain clear documentation and change control, and share knowledge across IT, OT, and cybersecurity teams.
Required Qualifications
- Bachelor’s Degree in information technology, cybersecurity, computer science, engineering, or a related discipline.
- Extensive experience may be considered in lieu of a degree.
- 5+ years of progressive experience in network engineering and cybersecurity.
- 3+ years of hands-on experience designing, securing, and operating Microsoft Azure in a production enterprise environment (required).
- Expertise in network engineering across LAN, WAN, wireless, including routing and switching, next-generation firewalls, VPNs, and secure network segmentation.
- Expertise in Microsoft Azure networking and security, including virtual networks, hybrid connectivity, and native network security controls.
- Hands-on troubleshooting across network, cloud, and security layers.
- Working knowledge of Microsoft security tools including Entra ID, Defender for Cloud, and Microsoft Sentinel.
- Working knowledge of OT/ICS network security concepts such as IEC 62443 and the Purdue Model.
- Working knowledge of security frameworks such as NIST CSF and CIS Controls.
- Strong communication skills, including clear documentation and the ability to explain technical concepts to non-technical stakeholders.
- Strong problem-solving skills and a record of delivering complex technical projects.
Technologies and Tools
Microsoft Azure, Zero Trust, Entra ID, Defender for Cloud, Microsoft Sentinel, IEC 62443, Purdue Model, NIST CSF, CIS Controls, PowerShell, Python, Bicep, Terraform, SOX, ZTNA, Microsoft Defender for IoT, Claroty, Nozomi Networks, Dragos.
Hybrid Schedule and Location
- Hybrid role based in Danbury, CT.
- Onsite requirement: three days per week onsite and two days per week remote, with the schedule changing during the first 90 days (four days onsite and one day remote during the first 90 days).
- Onsite presence is required to collaborate with cross-functional teams and support operational systems.
- Required to work onsite at the Torrington facility one day every two weeks or as needed.
Working Conditions and Physical Requirements
- General work performed in office, manufacturing, and warehouse environments using a computer and standard office equipment.
- During the first 90 days: 4 days in the office and 1 day working from home; thereafter: 3 days in the office and 2 days working from home.
- Occasional after-hours, weekend, or on-call work may be required for maintenance windows, OT production schedules, and security incidents.
- Ability to lift, carry, or move equipment weighing up to 25–35 lbs.
- Ability to bend, crouch, or reach to access equipment and workspace areas.
- Ability to wear required PPE as designated based on the work location.
- Ability to walk or stand for short periods while performing onsite support.
- Ability to sit for extended periods while working on a computer or performing monitoring tasks.
Compensation
USD 113,000 - 126,000 per yearly.
Additional Qualifications (Plus)
- Relevant certifications such as Microsoft AZ-500 or AZ-700, CCNP, CISSP, or GICSP.
Preferred Background
- Experience in manufacturing, energy, utility, or other industrial environments, including exposure to OT networks.
- Familiarity with Infrastructure as Code (e.g., Bicep or Terraform) and scripting (e.g., PowerShell or Python).
- Familiarity with OT security monitoring platforms (e.g., Microsoft Defender for IoT, Claroty, Nozomi Networks, or Dragos).
- Exposure to Zero Trust Network Access (ZTNA) platforms and SOX or other compliance audits.
Benefits
- Medical, dental, vision
- Company-paid life/disability insurance
- 401(k) plan
- Employee stock purchase plan
- Generous paid leave
- Comprehensive benefits including medical, dental, vision, company-paid life/disability insurance, 401(k) plan, employee stock purchase plan, and generous paid leave
Employment Requirements
- Successful completion of a drug screen
- Criminal background check
- Employment and education verification
Equal Opportunity Employer
FuelCell Energy is an equal-opportunity employer committed to an inclusive and safe work environment. FuelCell Energy, Inc. is also committed to ensuring its application process provides equal employment opportunity to all U.S. job seekers, including individuals with disabilities.
