About the role: Eagle Creek Renewable Energy is seeking an experienced IT Networking & Information Security Compliance Administrator. This hybrid role combines hands-on network administration and IT helpdesk support with responsibility for safeguarding our regulatory standing and the security of critical generation assets across our hydropower fleet. The ideal candidate has practical experience supporting enterprise and operational technology (OT) networks and can translate complex regulatory requirements — especially NERC CIP and NIST — into clear, well-documented controls.

What You'll Do:

Monitor networks and systems for security breaches or suspicious activity; investigate incidents and produce detailed reports. Track new and revised NERC standards and FERC orders; perform gap analyses and translate changes into actionable requirements. Develop, maintain, and test internal controls and policies; keep documentation audit-ready. Administer and troubleshoot LAN/WAN infrastructure, including switches, routers, firewalls, wireless access points, and VPN concentrators. Manage IT and OT network infrastructure at hydropower facilities, ensuring high availability and reliability. Implement network security controls (ACLs, segmentation, IDS/IPS) and support vulnerability scanning and remediation. Review proposed system and infrastructure changes for security, compliance, and architectural impact. Provide Tier 1/Tier 2 support for hardware, software, network connectivity, VPN, and remote access issues. Maintain accurate ticket documentation and contribute to knowledge base articles.

What Skills and Experience You'll Need:

Education and Experience:

Bachelor's degree in information security, information systems, computer science, engineering, or a related field, or equivalent experience. Proven experience in regulatory compliance, audit, GRC, or internal controls, ideally in electric utility, energy, or another regulated or critical-infrastructure environment. Working knowledge of the

NERC CIP

compliance lifecycle, including self-certification, self-reporting, mitigation, and audit. Hands-on experience in network administration and/or IT support, ideally in a multi-site or critical-infrastructure environment. Regulatory compliance/audit experience is a plus; working knowledge of the

NERC CIP

compliance lifecycle is a strong plus. Strong practical skills with network hardware/software (Cisco, Palo Alto, Fortinet or similar), TCP/IP, VLANs, routing, switching, firewalls, VPNs, and wireless.

Communication and Collaboration:

Strong written communication and documentation discipline to produce audit-ready evidence and clear compliance reporting. Ability to collaborate and work cross-functionally with teams such as IT, operational technology, physical security, legal, and management. Certifications (preferred): CompTIA Network+/Security+, Cisco CCNA/CCNP, and/or

NIST/NERC

CIP-related training