About the role
About the role: Eagle Creek Renewable Energy is seeking an experienced IT Networking & Information Security Compliance Administrator. This hybrid role that primarily is responsible for safeguarding our regulatory standing and the security of critical generation assets across our hydropower fleet while also being available for hands-on network administration and IT helpdesk support. The ideal candidate has practical experience supporting enterprise and operational technology (OT) networks and can translate to complex regulatory requirements (especially NERC CIP and NIST) into clear, well-documented controls.
What You’ll Do: Security Compliance & Regulatory * Track new and revised NERC standards and FERC orders; perform gap analyses and translate changes into actionable requirements. * Monitor networks and systems for security breaches or suspicious activity; investigate incidents and produce detailed reports. * Develop, maintain, and test internal controls and policies; keep documentation audit-ready. * Produce compliance status reporting and KPIs for leadership; support incident and recovery documentation.
Network Administration * Administer and troubleshoot LAN/WAN infrastructure, including switches, routers, firewalls, wireless access points, and VPN concentrators. * Implement network security controls (ACLs, segmentation, IDS/IPS) and support vulnerability scanning and remediation. * Review proposed system and infrastructure changes for security, compliance, and architectural impact.
IT Helpdesk Support * Provide Tier 1/Tier 2 support for hardware, software, network connectivity, VPN, and remote access issues. * Maintain accurate ticket documentation and contribute to knowledge base articles.
What Skills and Experience You’ll Need: * Education and Experience: * Bachelor’s degree in information security, information systems, computer science, engineering, or a related field, or equivalent experience. * Proven experience in regulatory compliance, audit, GRC, or internal controls, ideally in electric utility, energy, or another regulated or critical-infrastructure environment. * Working knowledge of the NERC CIP compliance lifecycle, including self-certification, self-reporting, mitigation, and audit. * Hands-on experience in network administration and/or IT support, ideally in a multi-site or critical-infrastructure environment. * Regulatory compliance/audit experience is a plus; working knowledge of the NERC CIP compliance lifecycle is a strong plus. * Strong practical skills with network hardware/software (Cisco, Palo Alto, Fortinet or similar), TCP/IP, VLANs, routing, switching, firewalls, VPNs, and wireless. * Communication and Collaboration: * Strong written communication and documentation discipline to produce audit-ready evidence and clear compliance reporting. * Ability to collaborate and work cross-functionally with teams such as IT, operational technology, physical security, legal, and management. * Certifications (preferred): CompTIA Network+/Security+, Cisco CCNA/CCNP, and/or NIST/NERC CIP-related training