Job description
As an Operational Technology (OT) Security Engineer, you will be engaging directly with enterprise and regional OT operators and infrastructure resources to support critical infrastructure operations. You will be instrumental in designing and implementing OT technologies with a security-by-design methodology. You will develop solutions to meet emerging business requirements, while optimizing the existing operational technology across the enterprise. You will work with a highly dynamic team supporting critical infrastructure utilities on an international stage. Extensive Operational Technology (OT) experience is a REQUIREMENT. Candidates must have a demonstrated history in OT security design frameworks, architectures, and standards. Candidates should be well-versed in understanding frameworks such as the Purdue Enterprise Reference Architecture (PERA), IEC 62443, NIST 800-82, NERC CIP, TSA Pipeline, API 1164, and FERC Dam Safety.
Responsibilities:
Responsibilities:
- Ensure OT systems and solutions adhere to industry security standards based on NERC-CIP, ISA99/IEC 62443, NIST Special Publications and compliance requirements.
- Support the design and implementation of OT solutions in partnership with OT Infrastructure team and regional OT operators and system owners.
- Support business-led initiatives to provide cybersecurity, compliance and risk mitigation recommendations throughout project lifecycles.
- Integrate cybersecurity requirements within production engineering and operational work processes, tools, standards, and procedures.
- Document and define systems security plans for new and existing systems supporting OT environments.
- Solid understanding of Industrial Control Systems.
- Demonstrated history supporting SCADA, ICS, & EMS
- Solid understanding of Cybersecurity.
- Effective written and verbal communication skills that demonstrate fluency in the languages used by OT and IT.
- Cybersecurity incident response and root cause analysis.
- Strong problem-solving, data analysis and data correlation skills
- Swift decision making and judgement abilities
- Well-versed in security rules, regulations and standards
- Education: Bachelor's degree in Computer Science, Electrical/Electronic Engineering, Information Technology, or another related field; or an associate degree plus five (5) years of related IT experience
- Minimum of five (5) years of experience with ICS/OT Engineering and IT experience.
- Experience with ICS/OT cybersecurity and intricate knowledge of industry standards: NERC-CIP, ISA99/IEC 62443, NIST CSF.
- Certifications are STRONGLY preferred: Global Industrial Cyber Security Professional (GICSP), GIAC Critical Infrastructure Protection (GCIP), Certified Information Systems Security Professional (CISSP).
