Site IT/OT Network Infrastructure Lead

Ketjen is hiring for a Site IT/OT Network Infrastructure Lead in Amsterdam. The Amsterdam site operates critical IT, lab, and OT networks, requiring secure, reliable connectivity during and after Ketjen’s separation from Albemarle. The IT/OT Network & Systems Engineer provides on‑site technical ownership of Ketjen Amsterdam’s network, security, and hybrid infrastructure.

The role supports both IT and OT environments, ensuring secure connectivity, compliance with Zero Trust principles, cybersecurity frameworks, and alignment with Ketjen’s global cloud‑first architecture.

This position collaborates closely with global IT partners (including managed service providers) and supports local site and datacentre connectivity, Cloud, SD‑WAN, and OT network segments. The role requires strong networking, security, Azure integration, and hands‑on on‑site technical capability.
This role reports to Site IT Manager, Amsterdam. Some shared on‑call contribution is expected. This position is hybrid and located in Amsterdam.

What You Will Do

• Manage Amsterdam’s segmented IT/Lab/OT network stack, including Cisco switching/routing, VLANs, L2/L3, and Meraki, Wireless APs, FortiGate firewalls and SD‑WAN (manage firewall policies with global security/SOC).

• Maintain hybrid connectivity (SD‑WAN overlays, ExpressRoute/VPN, site‑to‑cloud tunnels).

• Support Azure‑integrated networking (VNETs, routing, hub/spoke, private endpoints, Azure Firewall/NVA, Bastion, WAF) and identity flows aligned to Entra ID.

• Enforce Purdue‑aligned segmentation/DMZ patterns for IT/OT.

• Monitor and maintain network health via Azure Monitor and partner tools; manage patching, configuration standards, backups, and resilience.

• Maintain onsite installation, cabling, documentation, and server‑room hygiene (cabinets, UPS, racks); support lifecycle management for switches, firewalls, wireless, and related equipment.

• Enable secure IT/OT connectivity and vendor access (ZTNA/VDI/Secure Remote Access) and collaborate with MSPs, SOC/NOC, and global architects on cutovers, migrations, audits, and incident escalation.

What You Bring

Required:

• Experience: 5+ years in networking, infrastructure, or mixed IT/OT environments.

• Hands‑on expertise with FortiGate firewalls and SD‑WAN.

• Strong Cisco switching/routing, VLANs, L2/L3, enterprise wireless/Meraki.

• Hybrid connectivity (ExpressRoute/VPN, SD‑WAN), segmentation (IT/OT DMZ, Purdue).

• Azure networking & identity fundamentals (VNETs, routing, private endpoints, Entra ID, MFA/CA); Windows Server core services (AD/DNS/DHCP).

• Clear communication with technical and non‑technical users, and the ability to collaborate with global teams/MSPs while balancing project work with urgent onsite incidents.

Preferred:

• Experience applying Zero Trust principles for network and identity.

• Familiarity with SOC processes, SIEM telemetry, vulnerability management, and secure configuration practices.

• Exposure to PABX/VoIP/MS Teams Phone environments.

• Awareness of industrial concepts (Modbus, Profinet, Profibus, PLCs, LIMS/PI/historian flows) - nice to have.

• Experience in chemical, manufacturing, or OT‑heavy operational sites - nice to have.