Job Advert
At KeolisAmey Docklands (KAD), we operate the iconic Docklands Light Railway (DLR), delivering service excellence in one of London’s most critical transport systems. We are now looking for a skilled Operational Technology (OT) Network Engineer to join our team and help maintain a secure and resilient OT network infrastructure that supports safe and efficient rail operations.
As an OT Network Engineer, you will play a key role in maintaining, developing, and optimising KAD’s OT network systems. This involves working with cutting-edge networking and virtualisation technologies in a safety-critical railway environment. You’ll collaborate with IT, OT, security teams, external suppliers, and Transport for London to ensure seamless OT system performance and cybersecurity compliance.

ESSENTIAL SKILLS & EXPERIENCE:

✔ Bachelor’s degree in Network Engineering, IT, or related field
✔ Minimum 5-7 years’ experience in network engineering, ideally in OT/ICS environments

Hands-on experience with:

• Cisco Networking
• Firewalls (Cisco/Juniper)
• Windows Server (AD, NPS, WSUS) & Red Hat Linux
• VMware Virtualisation & Dell Servers

✔ Strong knowledge of IP networking, VLANs, VPNs, routing, and network security
✔ Experience in network hardening and cybersecurity best practices
✔ Excellent problem-solving skills and attention to detail

JOIN US

At KAD, we value diversity and inclusion, recognising that varied perspectives drive innovation. We welcome applicants from all backgrounds.
Please read the full job description before applying and ensure your CV and cover letter clearly align to the essential criteria.
Closing Date: 21st August 202

• Deploy and maintain Cisco Nexus switches, OT firewalls, Juniper internet firewalls, and Dell servers.
• Manage VMware ESXi environments and StorMagic SvSAN storage solutions.
• Oversee OT network segmentation, VLAN and subnet management, firewall rules, and security zoning following the Purdue model.
• Administer Active Directory, DNS, DHCP, SIEM, Cisco ISE, SolarWinds, and Splunk.
• Support remote access, VPNs, endpoint security, and manage dual ISP circuits at depot locations.
• Implement and maintain cybersecurity best practices including system hardening, antivirus, patch management, and compliance with standards such as IEC 62443 and ISO27001.
• Provide technical support for systems including CCTV servers, CIS/ASC workstations, AIMS, and OTMR log management.
• Participate in Factory Acceptance Tests (FAT) and Site Acceptance Tests (SAT) to ensure system integrity pre-deployment.
• Document technical processes, conduct system audits, and support incident response activities.