Infrastructure & Hardware - Infrastructure & Datacenter
Controls Engineer
IC / Practitioner
Independently auditedKeeps the physical and cloud foundation running under everything else. Owns a defined area of the function and the outcomes it produces.
Audited package
Built, independently audited role package. Everything on this page is written for this seat.
Your Stack (Swappable)
This role works against whatever tools you already run. We list the tool categories the role operates in, never a named vendor, so you are never asked to replace a system that works.
- Workplace & Facilities
- Observability & Monitoring
- PLC / controllers & programming
- SCADA / HMI
- DDC field controllers
- API & Integration (iPaaS)
- Design & Prototyping
- Analytics & BI
- Version Control & Code Review
- OT network / infrastructure
Deliverables
- Runbooks and procedures
- Capacity forecasts
- Topology and resilience designs
- Change and maintenance plans
Responsibilities
- Author the sequences of operation and control narratives for the mechanical and electrical plant - normal operation and, deliberately, the failure, transfer, and loss-of-comms behavior - as the agreed source of truth the code is programmed to
- Design the points list and I/O (AI / AO / DI / DO), the tag / naming standard, and the interface definitions so the system is complete, observable, and maintainable
- Program the BMS / BAS, EPMS, PLC / DDC / SCADA logic and the operator graphics / HMI to the sequence of operation, to a documented, version-controlled standard another engineer can read and continue
- Design the integration across the mechanical, electrical, and monitoring layers - the protocol mapping (BACnet / Modbus / SNMP / OPC-UA), the gateways, and the data model - so multi-vendor equipment interoperates as one system
- Design and rationalize the alarm and setpoint strategy - priorities, thresholds, deadbands, and interlocks - so every alarm is a call to action and a real event is not lost in a nuisance flood
- Design the failure and transfer control logic - fail-safe / fail-state behavior, interlocks, and the sequencing that respects the redundancy model (N+1 / 2N) - so the plant protects the load when a component or a feed is lost
- Tune the control loops (PID / setpoint / deadband) to stable, non-hunting control, and correct the drift and instability that wear the plant and trip false alarms
- Perform point-to-point checkout - field device to controller to graphic to alarm - and hand a checkout-ready system to the commissioning function to prove; support functional and integrated testing without owning the acceptance
The essence of this seat
The Controls Engineer designs and programs the control logic that makes a critical-facility power and cooling plant respond correctly - the building management system (BMS / BAS) and the electrical power monitoring system (EPMS), the PLC / SCADA / DDC programming, the sequences of operation (SoO) and control narratives, the points list and I/O, the alarm and setpoint strategy, and the integration that ties the mechanical, electrical, and monitoring layers into one coherent system.
Signature move
Design the failure case before the happy path. The first move on any sequence is to define what the plant does on a loss of power, comms, or a sensor - the deliberate fail-safe / fail-known state chosen to protect the load - not to program the normal run and bolt the failure behavior on afterward
What good looks like
starts from the control narrative before the code and designs from the failure backward; specifies the failure / transfer / loss-of-comms behavior with interlocks and deliberate fail-states to protect the load, not just the normal running state; lets the points / I/O fall out of the narrative; treats the SoO as the agreed source of truth the mechanical designer, operator, and commissioning agent align on; measures a good SoO by whether it answers "what does the plant do when X fails" for every credible X
Decision rights
- - the sequence-of-operation and control-narrative design
- - the points list, I/O, and tag-naming standard
- - the BMS / EPMS / PLC / DDC / SCADA programming and the operator graphics
- - the alarm and setpoint strategy and its rationalization
- - the integration mapping and data model across the mechanical, electrical, and monitoring layers
Working vocabulary
What this role does
The Controls Engineer designs and programs the control logic that makes a critical-facility power and cooling plant respond correctly - the building management system (BMS / BAS) and the electrical power monitoring system (EPMS), the PLC / SCADA / DDC programming, the sequences of operation (SoO) and control narratives, the points list and I/O, the alarm and setpoint strategy, and the integration that ties the mechanical, electrical, and monitoring layers into one coherent system. Core ownership is the sequence of operation and how it is programmed - how the plant runs normally and, above all, how it behaves on a failure, a transfer, or a loss of comms - so an operator has a console that shows the truth and logic that protects the load when something trips. This is an individual-contributor seat reporting to a critical-facilities / datacenter engineering manager, with design and programming ownership of the controls and close partnership with the mechanical and electrical designers, the commissioning function, the controls vendor / integrator, and the operations team who will run what it builds. It is not the Commissioning Engineer who proves the integrated system behaves through functional and integrated testing (this seat programs the logic that gets proven - program-it vs prove-it), not the Electrical Engineer who designs the power system itself - the one-lines, the load calcs, the protection and coordination (this seat designs the controls and monitoring that operate and observe that power system - power-design vs controls-logic), not the Power Generation Engineer who owns the generation and prime-power systems and their native control strategy - the gensets, the paralleling switchgear (this seat owns the facility-wide BMS / EPMS integration across the plant, not the generation system's internal controls), and not the Sr. Datacenter Operations Technician who operates the plant from the BMS / EPMS console and responds to the alarms (this seat programs what that console shows and how the logic responds - program-the-console vs operate-the-console). Performance is visible in whether the plant does the right thing on a real failure or transfer without a logic-caused load impact, whether the integrated systems test passes the first time, and whether the operator's console is meaningful rather than a nuisance-alarm flood - so better control design produces measurable, provable resilience. What separates great from average is designing for how the plant fails, not just how it runs: a sequence of operation written so the transfer, the chiller loss, and the loss of a sensor land the plant in a safe, defined state instead of an undefined one; a points list and integration disciplined enough that a device swap does not rewrite the plant; an alarm strategy rationalized so a real event is not buried; loops tuned to stability rather than left to hunt; and every point checked out end to end - field to graphic - before it is handed to commissioning to prove. A mediocre controls engineer programs the happy path, floods the console with alarms nobody trusts, leaves the failure logic to chance, and hands over code no one else can read; a great one makes the plant behave correctly on its worst day and hands over a documented system the operator can run and the commissioning agent can prove.
Best-fit customer
infrastructure teams that need disciplined change control and capacity planning
Need more than one role?
Buying the whole team or the complete department lowers your effective cost per role at every tier of the ladder.