OT Cybersecurity Design Engineer - Nationals

OT Cybersecurity Design Engineer

We empower our people to stay resilient and relevant in a constantly evolving world. We’re looking for people who are always searching for creative ways to grow and learn. People who want to make a real impact, now and in the future. Does that sound like you? Then it seems like you’d make an outstanding addition to our vibrant international team.

Siemens Digital Industries is a leading innovator in automation and digitalization. Our mission is to support customers in maximizing growth, profit opportunities and ecological footprint in the discrete and process industries. Ready to unlock the full potential of technology? Join our Digital Industry as the OT Cybersecurity Design Engineer and help us re-imagine the world by finding solutions and making the world a more inquisitive place for tomorrow.

• Engineer, implement, and monitor security measures for the protection of ICs systems or SIS systems, related networks, and information, while identifying and defining system security requirements.
• Design ICs systems security architecture and develop detailed cybersecurity designs adhering to standard blueprints and best design practices.
• Engage in the entire software/system lifecycle, encompassing design, documentation, installation, configuration, and testing.
• Manage System Backup technologies like Acronis & other providers, including installation and deployment.
• Deploy and Manage End Point Security & Application Control Solutions from McAfee & other providers, as well as SIEM solutions like McAfee, Splunk, Q-radar, & other providers.
• Implement and manage network-based firewalls (e.g., Fortinet, Palo Alto, CISCO, SonicWALL, Siemens, etc.), network troubleshooting, and intrusion detection products.
• Install and manage Network Management Solutions.
• Conduct firmware updates for various Automation Control Systems, Switches, Firewalls, etc.
• Configure and deploy Domain Controller settings and policies to defined computer groups.
• Implement host-based security technologies such as Antivirus, Data Leakage Prevention, Host IPS, Whitelisting, and Anomaly Detection.
• Perform installation, configuration, and testing activities at both factory (manufacturing facility) and customer sites, with experience in Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT).
• Prepare comprehensive system documentation including Functional Design Specifications, Backup Systems documentation, Firewall configurations, Network Diagrams, System Architectures, Asset Inventory, FAT and SAT procedures, and Operation & Maintenance manuals.

• Bachelor’s degree in engineering (Electrical Engineering, Computer Engineering, or related field). A degree in Cybersecurity is preferred.
• Valid certification in OT security (e.g., CISSP, GICSP, OSCP) are highly desirable.

• Minimum of 3 years as Design/Site Engineer with experience in IT/OT security, with Proven experience in ICs Systems and Cybersecurity, with a focus on OT security.
• Knowledge of Shell Design and Engineering Practices (Shell DEPs), Oil & Gas engineering practices, applicable specifications, codes, and international standards.
• Familiarity with the Oil and Gas industry and its specific cybersecurity challenges.
• Demonstrated experience in executing sizable EPC jobs for brownfield Oil and Gas projects.
• Ability to manage multiple priorities in a dynamic environment.
• A minimum of 2 years professional experience in large EPC projects
• A minimum of 3 years professional experience in design, engineering, and site execution.

• VxRail Clusters and other Virtualization Platforms and Management Client/Consoles.
• Backup Systems, Patch Management, Data diodes, and Workstations.
• Domain Controller, PDC/RADIUS Server.
• Endpoint protection solutions including McAfee Complete Endpoint Protection, Protect PLUS Business Software, McAfee MOVE Antivirus for Virtual Servers, and McAfee Application Control for Servers Protect PLUS Business.
• SIEM (Security Information and Event Management) solutions.
• One-Way Data…