OT Cyber Security Engineer

Job Title: OT Cyber Security Engineer
Job Location:Doha, Qatar
Industry: Industrial Automation / Cybersecurity / Oil & Gas / Energy / Utilities
Employment Type: 2 Years Extendable
Number of Vacancies: 2

We are seeking an experienced OT Cyber Security Engineer to design, implement, test, commission, and support cybersecurity solutions for Operational Technology (OT) and Industrial Control Systems (ICS). The ideal candidate will have strong hands-on expertise in OT cybersecurity architecture, industrial network security, vulnerability management, and security monitoring, along with working knowledge of Siemens automation platforms. The role also requires customer coordination, project management, site execution, and the ability to mentor junior engineers.

• Education: Bachelor's degree in Cybersecurity, Electrical, Electronics, Instrumentation, Computer Engineering, Information Technology, or a related field.
• Experience: Minimum 7 years of relevant experience in OT/ICS cybersecurity engineering, including design, configuration, testing, commissioning, and site execution.
• Technical
  
  Skills:
  
  
  • Strong knowledge of OT/ICS cybersecurity architecture, defense-in-depth, Purdue Model, ISA-95, network segmentation, security zones and conduits, and OT-DMZ.
  • Hands-on experience with industrial firewalls, VLANs, ACLs, VPNs, secure remote access, and network security configuration.
  • Experience with OT network monitoring and IDS/NIDS solutions such as Nozomi, Dragos, Claroty, or equivalent.
  • Knowledge of system hardening, Active Directory, endpoint security, SIEM, centralized logging, vulnerability management, and backup and disaster recovery.
  • Working knowledge of Siemens SIMATIC PCS 7, S7-400/S7-1500, TIA Portal, WinCC/WinCC OA, SCALANCE, and Siemens industrial networking solutions.
  • Experience preparing cybersecurity architecture diagrams, risk assessments, firewall matrices, technical documentation, FAT/SAT procedures, and commissioning reports.
  • Knowledge of IEC 62443, NIST SP 800-82, NIST Cybersecurity Framework, and ISO/IEC 27001.
• Mandatory Criteria:
  • Proven hands-on experience in industrial OT/ICS cybersecurity projects.
  • Experience in customer and consultant coordination, technical presentations, design reviews, and resolution of technical comments.
  • Ability to manage multiple projects, coordinate site activities, and deliver projects within quality and schedule requirements.
  • Experience mentoring or coaching junior engineers.
  • Willingness to travel and work at project sites during commissioning, shutdowns, and critical troubleshooting.
  • Valid Qatar  preferred.

• Design, engineer, implement, test, commission, and support OT cybersecurity solutions throughout the project lifecycle.
• Develop secure OT architectures, network diagrams, OT-DMZ designs, firewall rules, security policies, risk assessments, and asset inventories.
• Configure and commission industrial firewalls, network segmentation, secure remote access, and OT network monitoring solutions.
• Implement system hardening, endpoint protection, access controls, vulnerability management, and centralized security logging.
• Coordinate cybersecurity changes with automation engineers to ensure process safety, system availability, redundancy, and reliable industrial communications.
• Prepare and execute FAT, SAT, security validation, failover testing, backup/restore testing, and commissioning activities.
• Conduct technical discussions, design reviews, workshops, and risk assessments with customers, consultants, EPC contractors, OEMs, and internal teams.
• Manage multiple projects, monitor progress, resolve technical issues, and ensure quality documentation and timely delivery.
• Provide technical guidance, troubleshooting support, and training to junior engineers.
• Maintain project documentation, as-built drawings, test reports, and handover records.
• Stay updated on emerging OT cybersecurity technologies, industry standards, threat detection, Zero Trust, and industrial security best practices.

• GIAC GICSP, ISA/IEC 62443, or TÜV IEC 62443.
• CISSP, CISM, Security+, CySA+, or equivalent cybersecurity certifications.
• Relevant certifications in Fortinet, Palo Alto, Cisco, Check Point, Nozomi, Dragos, Claroty, Splunk, QRadar, or Microsoft security solutions.
• Siemens automation or industrial networking certifications in PCS 7, TIA Portal, WinCC, SCALANCE, or SINEC NMS.