Summary:
This is a cross-functional role supporting the real-time operations of industrial control systems (ICS). The focus is on network integration, cybersecurity, and risk mitigation, especially across new and existing U.S. facilities.
Core Responsibilities:
- Support, design, and monitor ICS networks, including greenfield/brownfield integration projects.
- Lead cybersecurity work: firewall rule reviews, OT patch management, and compliance with NERC CIP, NIST, and other standards.
- Collaborate closely with renewables and thermal sites to ensure systems are integrated securely and effectively.
- Develop and maintain network documentation, security procedures, and response plans.
- Guide vendor and contractor relationships to support ongoing projects.
- Driving ICS Security Governance: Develop and maintain internal ICS standards and ensure alignment with best practices and regulations.
- Cyber Risk Mitigation Planning: Design cyber risk strategies in alignment with MOC and Supply Chain policies.
- OT System Support: Oversee patch management, monitoring, alerting, and incident remediation for OT systems.
- OT Infrastructure Management: Manage OT tools and assets including SIEM, PAM, MFA, asset tracking, and backups.
- System Assessments: Conduct and support comprehensive ICS/OT risk assessments
- Lifecycle Planning: Contribute to the long-term strategy and digital roadmap for OT modernization.
- Technical Guidance: Provide hands-on technical support and mentoring to field maintenance and contract teams.
- Change Management Compliance: Oversee and validate MOC processes tied to ICS work and upgrades.
- Incident Response: Actively respond to cybersecurity incidents, coordinating containment and remediation efforts.
Must-Haves:
- 7+ years of ICS/OT system experience, including 3+ years focused on industrial network design and support
- Strong working knowledge of SCADA, PLCs, DCS, and protocols like MODBUS, DNP3, OPC
- Expertise in network infrastructure: firewalls, switches, routers, spanning tree, failover services, etc.
- Experience with Windows domain administration, virtualization, and patch/vulnerability management
- Excellent communication skills - must build strong relationships with plant sites and vendors
- Able to travel to Canada
Nice-to-Haves:
- Cisco CCIE certification or equivalent advanced networking credentials
- Familiarity with Maximo, CMMS tools, and cybersecurity software (SIEM, endpoint protection, etc.)
- Experience developing or supporting cyber risk mitigation plans for critical infrastructure
- Knowledge of asset management, logging tools, and vulnerability scanning