Job Description

Key Responsibilities:

• Design and implement OT network segmentation based on the Purdue Model, including DMZs, industrial firewalls, and secure remote access architectures.
• Deploy and manage RBAC, MFA, jump servers, and vendor access solutions with session monitoring and recording.
• Implement zero‑trust principles tailored for OT/ICS environments.
• Oversee security of IT‑OT converged systems, PLC, ICS, and SCADA environments.
• Prepare, validate, and troubleshoot firewall rules for OT zones.
• Maintain accurate OT asset inventories for PLCs, DCS/SCADA, HMIs, historians, engineering stations, and edge devices.
• Manage configuration baselines and secure backups/restore mechanisms including immutable/offline backups.
• Lead risk‑based vulnerability management, patch cycle planning, compensating controls and OT Change Advisory Board (CAB/MOC) processes.
• Enhance asset management practices and ensure lifecycle security of OT components.
• Manage and enhance OT incident response processes by collaborating closely with site teams and the Security Operations Centre (SOC).
• Lead response and recovery activities during OT cyber events.
• Deploy and optimize endpoint protection, EDR allow‑listing, NAC, and other monitoring tools.
• Ensure compliance with IEC 62443, NIST 800‑82, ISO 27001 and other regulatory/corporate security requirements.
• Conduct cybersecurity assessments (IEC 62443, NIST 800‑82, etc), risk evaluations, security reviews, and audits for OT environments.
• Support accreditation activities, define and develop security requirements, assist in the deployment of cyber solutions (e.g., Domain, DNS, WSUS, etc.), perform troubleshooting, and contribute to secure architecture design.
• Identify risks, define mitigation strategies, and track remediation of security gaps.
• Collaborate closely with OT Cybersecurity Architect, IT SOC, OT Governance, regional security teams and operational staff.
• Ensure supply‑chain security for critical industrial and OT/ICS components.
• Contribute to OT transformation, modernization, and upgrade projects.
• Provide advanced technical support to OT users and plant teams.
• Mentor junior engineers and help grow the OT Cybersecurity capability and team.
• Support business development activities as required.
• Build strong relationships with internal and external partners and maintain awareness of relevant cybersecurity regulations.
• Mentor junior engineers and upskill plant/operations teams.

Required Qualifications:

• 8–12+ years of experience in cybersecurity with at least 5 years in OT/ICS security roles.
• Strong understanding of DCS/SCADA systems, PLCs ((Siemens/Rockwell/Schneider /Emerson/ABB/Honeywell/Yokogawa/etc), HMIs, historians, and engineering workstations.
• Hands‑on experience with industrial protocols (Modbus/TCP, PROFINET, EtherNet/IP, OPC/OPC UA, DNP3, BACnet, etc).
• Proficiency in L2/L3 networking, VLANs, ACLs, VPNs, and industrial security appliances (firewalls, IDS/IPS, etc).
• Experience with OT cyber solutions (e.g., Domain, DNS, backup/restore, etc.), incident response, and SIEM/SOC integrations
• Familiarity with IEC 62443, NIST 800-82, ISO 27001, etc.