Cybersecurity, OT-IT Security Consultant

Job Category: Digital Services

Requisition Number: CYBER
007062

• Posted :
  September 23, 2026
• Full-Time
• Remote

Showing 1 location

Remote / Virtual

As a Cybersecurity Engineer at Brown and Caldwell, you will play a pivotal role in securing the operational technology (OT) and information technology (IT) environments that keep water and environmental infrastructure running safely and reliably. We are using modern technology to transform the way that water is managed across the country. Your work will directly impact our clients' ability to protect critical infrastructure, maintain regulatory compliance, and build resilient digital solutions that ensure a future of clean water, thriving communities, and environmental protection.

• Lead strategic cyber engineering consultation projects.
• Make critical business development recommendations to balance risk and opportunity related to security solutions in accordance with the company's strategy and operations.
• Perform complex security assessments for engineering designs and client systems to identify areas of risk and compliance gaps.
• Compare engineering designs with security frameworks, such as AWWA and NIST CSF, to identify potential gaps.
• Lead the delivery of the security-related service offerings for our clients.
• Validate security solution architecture, design, and implementation.
• Support business development from a cybersecurity standpoint.
• Ensure compliance with company policies and external regulations related to digital security.
• Flexibility to adapt and execute various additional assignments based on evolving needs.

• Collaborate with interdisciplinary teams of environmental engineers, SCADA/controls engineers, data engineers, and software developers to assess, design, and implement cybersecurity solutions for client OT and IT environments.
• Lead cybersecurity risk and vulnerability assessments of industrial control systems (ICS), SCADA networks, and enterprise IT environments for water, wastewater, and environmental clients, aligned to NIST SP 800-82, NIST CSF, and IEC 62443.
• Design secure network architectures for converged IT/OT environments, including network segmentation, zone and conduit models, secure remote access, OT‑aware security gateways, and SOC integration strategies.
• Support clients in meeting regulatory and compliance requirements, including America's Water Infrastructure Act (AWIA) risk and resilience assessments, EPA cybersecurity guidance, and state‑level critical infrastructure requirements.
• Develop cybersecurity governance deliverables, including policies, incident response plans, system security plans, and roadmaps that balance operational reliability with security posture improvement.
• Evaluate and specify security technologies for OT environments (asset discovery and monitoring platforms, intrusion detection, firewalls, unidirectional gateways) with an understanding of the availability and safety constraints unique to industrial systems.
• Advise on secure design and deployment of emerging digital solutions — including cloud‑connected SCADA, IoT/edge sensing, digital twins, and AI/agentic systems — addressing risks such as API credential handling, data flow security, and prompt injection exposure.
• Support business development through proposal contributions, scopes of work, client presentations, and thought leadership on OT/IT convergence and critical infrastructure security.
• Stay up to date with emerging threats, technologies, and best practices in IC/OT security, cloud security, and AI system security to drive continuous improvement.
• Provide mentorship, guidance, support, and knowledge‑sharing to help less experienced team members develop their…