Applications are invited for a career opportunity as ICT Officer – Network Security and Firewalls. The officer may be required to provide after-hours, emergency or scheduled support for firewall, VPN, SD-WAN, internet connectivity, VoIP, Site connectivity, network security and SCADA/OT network connectivity incidents as well as planned maintenance or recovery activities required to minimize business disruption.
The primary function of the ICT Officer – Network Security & Firewalls is the administration, operation, monitoring and maintenance of the Company’s network security and connectivity infrastructure, including firewalls, secure remote access, SD-WAN, VPN, network segmentation, routing, switching, wireless security, VoIP network support and related connectivity services. The role ensures that network connectivity across Head Office, Terminal Division, Natural Gas Division, SCADA/OT environments, remote sites and field locations is secure, reliable, properly documented and controlled in accordance with approved ICT policies and standards. This is an operational and technical role. It implements and maintains network security controls in accordance with policies, standards and governance requirements established by the Senior ICT Officer – Cybersecurity, Governance & Compliance and approved by the Chief Information and Communication Technology Officer (CICTO).
Qualifications, Knowledge, Skills and Abilities Required
A degree or diploma in Information Technology, Computer Networking, Cybersecurity, Information Systems or a related field.
Four (4) to six (6) years’ experience in network administration, firewall administration, WAN/SD-WAN support or network security operations.
Practical experience administering firewalls, VPNs, routing, switching, VLANs, wireless networks and secure remote access.
Experience supporting multi-site environments and working with OT/SCADA or industrial network environments would be an asset.
Fortinet NSE 4 or equivalent firewall certification; Fortinet NSE 7 Secure SD-WAN or equivalent SD-WAN certification; CompTIA Network+, Cisco CCNA or equivalent networking certification; Vendor-specific firewall, switching, wireless or VoIP training and OT/ICS networking or cybersecurity awareness training would be an asset.
Strong technical troubleshooting skills; Sound understanding of routing, switching, firewalls, VPNs and network segmentation and
The ability to document technical configurations clearly and to work under pressure during outages and security incidents.
Strong understanding of change control and operational risk and good communication skills with technical and non-technical stakeholders.
Strong vendor coordination and follow-up skills and the ability to supervise assigned technical support activities and coordinate field connectivity tasks.
Duties and Responsibilities include, but are not limited to:
Network Security Administration
Administer and maintain firewalls, SD-WAN appliances, VPN services and related network security platforms.
Configure, review and maintain firewall policy rule bases, including security policies, NAT rules and security profiles.
Implement secure access controls based on least privilege and approved business requirements.
Monitor firewall, VPN and network security logs for anomalies, failed access attempts and operational issues.
Support firewall rule reviews, rule clean-up, documentation and validation of firewall changes.
Ensure firewall and network security changes are implemented through approved change-control processes.
Provide technical evidence and status updates to support cybersecurity reviews, audits and risk remediation activities.
SD-WAN, WAN and Site Connectivity
Support the design, implementation and maintenance of SD-WAN and WAN connectivity across Company locations.
Monitor site-to-site connectivity, failover, link performance and network availability.
Troubleshoot connectivity issues affecting corporate, field, remote and operational sites.
Coordinate with internet service providers, telecom providers and managed service partners on outages and service issues.
Maintain accurate records of network links, IP ranges, routing paths and site connectivity dependencies.
Support network connectivity planning for new sites, operational locations, remote infrastructure and business continuity requirements.
LAN, Wireless and Network Segmentation
Support LAN switching, VLAN configuration, wireless access control and network segmentation.
Maintain network segmentation between corporate systems, user networks, server environments, guest access and OT/SCADA zones.
Ensure network designs reduce unnecessary exposure and limit lateral movement.
Support secure connectivity between approved systems, applications and operational environments.
Assist with periodic reviews of network segmentation and access paths to ensure continued alignment with approved standards.
OT/SCADA Connectivity Support
Support secure network connectivity for SCADA, telemetry, field equipment and operational technology environments.
Assist with segmentation and controlled access between ICT and OT networks.
Coordinate with SCADA, engineering, operations and external vendors when network changes may affect operational systems.
Support remote-site communications for tank sites, PV sites, metering, telemetry and other field assets.
Ensure that network changes affecting OT/SCADA environments are properly assessed, approved, tested and validated before implementation.
Escalate any network security issue that may affect operational safety, environmental risk or system availability to the Senior ICT Officer – Cybersecurity, Governance & Compliance and the CICTO as required.
VPN, Remote Access, VoIP and Unified Communications
Administer secure remote access services, including VPN and MFA-related network access controls.
Review remote access activity and assist with removal of inactive, unauthorized or unnecessary access.
Support network services required for VoIP and unified communications, including VLANs, QoS, SIP trunk connectivity, call-quality troubleshooting and network availability for voice services.
Coordinate with telecom providers and PBX vendors where network or carrier issues affect voice services.
Provide technical support for authorized vendor and contractor remote access where approved.
Monitoring, Incident Support and Service Assurance
Monitor network availability, firewall health, VPN performance, SD-WAN links and security events.
Provide initial technical investigation and containment support for network security incidents.
Escalate material cybersecurity or compliance concerns to the Senior ICT Officer – Cybersecurity, Governance & Compliance.
Track network incidents, recurring issues, root causes and corrective actions.
Produce operational reports on network availability, service performance, firewall changes and major incidents.
Support restoration activities during outages, cybersecurity incidents, service disruptions and disaster recovery events.
Change, Configuration and Documentation
Maintain configuration backups for firewalls, switches, SD-WAN equipment and related network devices.
Document all approved network and firewall changes.
Maintain current network diagrams, IP address records, VLAN records, routing information, access records, configuration baselines, vendor support information and site connectivity records.
Ensure network changes include testing, rollback planning and proper approval.
Support audits, reviews and assessments by providing accurate technical evidence.
Supervision and Vendor Coordination
Assign and review field connectivity tasks.
Ensure field support activities follow approved security, safety and change-control requirements.
Coordinate with ISPs, SD-WAN providers, firewall vendors, telecom providers and technical service providers.
Provide technical input for network, firewall, SD-WAN and connectivity procurement.
The BNECL is an equal opportunity employer committed to fostering a diverse and inclusive workplace.
.Deadline for Applications
Applications should be submitted to the Human Resources Department, Barbados National Energy Company Limited, Woodbourne, St. Philip or emailed to humanresources@bnecl.com.bb with the subject line “Career Opportunity – ICT Officer – Network Security and Firewalls” no later than Friday, July 31 2026.
Unsuitable applications will not be acknowledged