Job Description

Substation Automation Engineer with Cyber Security Specialization executes substation automation system engineering activities for the projects assigned considering the quality/Cost/ time delivery criteria. This role involves planning design activities, managing project design budget, implementing design change process, supervising, and coordinating all engineering activities required to execute the project, whether done in house or by suppliers/subcontractors, and ensuring technical compliance to project specification.

Employee is responsible for cyber security design, configuration, implementation, assurance and training in the cluster. The candidate will liaise with tendering team (ITO) to recommend, clarify and propose appropriate cyber security solution based on customer specification and RFQs and liaise with execution team (OTR) in preparing, reviewing documents/drawings, configuration and conducting cyber security FAT and SAT. This role covers all GA business product lines including PAC, CIC and M&D.

Roles and Responsibilities:

As part of Technical Tendering

• Man-days (MD) estimation for design activities during ITO stage.
• Work closely with ITO team to support new opportunities preparation and negotiations. This includes conducting site surveys, deals estimations and prequalification support.
• Review any RFQ’s that touch on Cyber Security or could potentially have an impact on Cyber Security. List recommendations on how to proceed and list any clarifications or exceptions we might take to the bid concerning Cyber Security, using GE and GE Renewable energy Policies, coordinating with relevant teams (Grid Solutions, Renewable Energy, Legal).
• Proposing appropriate cyber security solutions to customer referring to customer specification and GE capabilities/products ensuring core system (DS Agile, GPG, CCS, CIC etc) compatibility.
• Creating an architecture reference that could be used for Inquiry to Order (ITO) proposals that require Cyber Security.
• Creating the Security Assurance Plan (SAP) for all projects which require it, be able to discuss it with relevant teams in GE and with the Customer.
• Creating a BOM template for Cyber security devices using a standardized format across GA.
• Creating a template that could be used for estimating costs associated with implementing cyber security (including parts, labor and testing of cyber architecture).
• Developing DOR for cybersecurity project execution by internal and external stake holders.

As part of Execution

• Demonstrate EHS compliance and ensure Zero Deviation Plan is implemented within the team and setting the example by demonstrating the proper acts and actively observes work conditions and behaviors, giving constructive feedback and celebrating EHS effective prevention.
• Man-days (MD) control for design activities during OTR stage.
• Execute the DCS Engineering activities for the projects assigned considering the quality/Cost/ time delivery criteria
• Liaise with other members of a multidisciplinary team to specify and design the project, whilst meeting the required technical standards.
• Preparation of all applicable production documentations needed for panels integration
• Ensure on-time delivery of design to stakeholders with suitable quality including partner documents.
• Participate in cost reduction process through standardization and out of the box ideas that optimize the provided solutions.
• Approve the technical evaluation of offers from suppliers, Support Procurement during commercial negotiation for POs issuance and during post order stage.
• Support site organization during site preparation and commissioning stage when required and ensure compliance with Quality Procedures, work instructions and processes defined at Unit and project level.
• Support factory during FAT preparation and conduct internal validation followed by customer FAT to ensure successful project delivery.
• Participate and contribute to the project multidisciplinary design reviews according to PL procedures and per the project strategy.
• Manage design issues up to resolution and validate design throughout customer acceptance and check consistency of engineering documents before final release to customer while managing evolution of customer requirements & associated impacts.
• Analyze customer technical requirements, prepare and or consolidate clause by clause analysis and ensure compliance to Customer requirements through technical queries. Identify, track and manage potential exception and represents customer interests in the design decisions at PM request.
• Effectively communicate directly with customers to ensure excellent customer service and to build and maintain customer intimacy.
• Creating the Functional Design Spec (FDS) and all documents for the cyber security system which would also define the architecture being implemented. In conjunction work with other internal and external entities to ensure the overall Cyber security design is cohesive.
• Conduct the FAT and SAT relating to Cyber Security. Detail on how the security of the system will be tested. Possibly help come up with a list of subcontractors that could be used.
• Configuring the Cyber security devices (Switches, hubs, servers, Jump box, firewalls, IDS etc.).
• Develop cyber security assurance and maintenance plan for all installed base and its execution.
• Align with core system team to implement and test cybersecurity during internal validation for system/solutions.

Globally

• Work very closely with R&D team to address DCS issues and provide the needed feedback to the product management team.
• Share best practices and lessons learned and continuously update the technical cyber security architecture, based on changing technologies, in collaboration with other engineering security leads, domain architects and experts.
• Training GE resources and develop cyber security team to address customer demands.
• Pre-qualify GE as preferred cyber security solution supplier/vendor for end customers
• Cyber Security CAPEX deployment in the SABAP cluster.

Required qualifications (Must Haves) :

• Degree in Electrical Engineering or related discipline technology from an accredited university
• Minimum 6 years of relevant experience in substation automation projects, and OT security
• Experienced in GE DS Agile, GPG or similar SAS system
• Experience with security designs and architectures, best practices in network topology for OT
• Ability to prepare design documents and configuration/database for substation automation projects and conduct FAT.
• Good experience in IEC61850, IEC-101, IEC104 and other substation automation communication protocols
• Experience with security technologies, such as
  • LDAP, RADIUS, GPO, SSH, SFTP, HTTPS, SYSLOG
  • Encryption, TLS
  • DMZ, Virtualization
• Ability to work effectively in a team and across functions, partnering with other teams in a worldwide environment
• Travelling: 50% of time for missions, tender/project support, customer meeting and marketing efforts.

Desired Characteristics (Nice to have):

• Knowledge in competitor products is advantage
• Ability to present technical solutions to customer and identify possible solutions for an issue
• Ability to provide training for internal team/customers and external customer/suppliers Time and resource management skills.
• Demonstrated experience with Telecom and Network Equipment (Routers, Switches, next gen Firewalls, etc)
• Demonstrated experience with Intrusion detection system and protection equipment and software (like Nozomi)
• Cyber security certification (ex. ISA, ISC2, SANS, ISACA, CISSP) is a plus
• Knowledge of cyber security standards and regulations affecting the utilities industry, such as IEC 62443, NERC CIP, IEEE 1686, IEC 62351
• Strong customer service/growth mind-set and strong interpersonal skills
• Awareness of latest technical developments in the cyber security community
• Pro-activeness, sense of urgency, resistance to pressure, autonomy; ability to interact with multiple functions and teams worldwide
• Excellent oral and written communication skills

Additional Information

Relocation Assistance Provided: No