Sr Power Generation Technical Services Specialist - Critical Infrastructure Protection

Sr Power Generation Technical Services Specialist
- Critical Infrastructure Protection

Next Era Energy Resources, LLC (NEER) is seeking an experienced individual to be part of the Power Generation Divisions - NERC CIP Compliance Program. This position will be located at NEER's Wyman plant, in Yarmouth, Maine, and report to the Power Generation Division
- Network Security Team Manager. The PGD Senior Technical Services Specialist role supports the cyber and physical security of the plants Industrial Control System (ICS) NERC Critical Infrastructure Protection (CIP) requirements. Candidates in this role will support NERC CIP process management, execution, implementation of security controls at power plants, and participation in ICS automation projects, as required.

Team members in this role will:

• Responsible for the execution and maintenance of plant cyber & physical security controls to meet corporate and NERC CIP standards
• Perform duties related to change management, patch management, antivirus, log monitoring, system administration, backup and recovery and restoration
• Executes weekly, monthly, quarterly & annual reviews & documentation based on corporate compliance and/or NERC CIP regulations
• Works closely with subject matter experts and vendors to complete project goals including audits, vulnerability assessments, mitigation plans & other various activates as needed
• Support cyber security improvement and life cycle projects

Additional Responsibilities:

This job applies diverse knowledge of technical principles and practices to a broad variety of assignments and related fields. Individuals in the job use advanced techniques and modification and extension of theories, precepts, and practices in individual's field. Employees in this role devise new solutions to problems encountered. Individuals will receive guidance related largely to overall objectives, critical issues, new concepts, and policy matters and may receive technical guidance for unusual or complex problems.

Provides full-time NERC CIP cyber and physical technical support to plant operations

Maintains cyber & physical access to meet corporate standards and/or NERC CIP standards

Executes weekly, monthly, quarterly & annual reviews & documentation based on corporate compliance standards and/or NERC CIP Regulations

Works closely with SME (Subject Matter Experts) and vendors to complete project goals including audits, vulnerability assessments, mitigations & other various activates as needed

Support and understand cyber security improvement and Life cycle projects

Working knowledge and understanding of NERC CIP regulatory standards and processes

Document and track all system changes with a heavy focus on NERC CIP 002, 004, 006, 007, 009, 010, 012, and 013

Preparation of documentation in support of audits and maintaining compliance of PGD Sites with Corporate and/or NERC CIP Regulations

Due to the 24 hour, 7 days per week nature of power generation, night, weekend, and holiday support via telephone or call-out, may be required

Desired

Qualifications:

• Working knowledge and understanding of NERC CIP regulatory standards and processes
• Understanding of security principles and good knowledge of cyber security technologies
• Understanding of network architecture and topologies
• Ability to perform monitoring and troubleshooting of cyber security problems
• Fundamental knowledge of Firewall security
• Project Management experience
• Ability to troubleshoot Network Switches and Routers on a Plant Control or Process Data Networks
• Knowledge of the latest standard practices for communication protocols and browser technologies
• General knowledge of a typical Distributive Control System (DCS)
• Knowledge of third-party datalink protocols (Modbus, DNP, ABPLC, etc.), that interface to DCS Control Systems
• System audit skills and/or information security experience (certifications)
• Bachelor's – Engineering/Computer Science/Information Security
• Knowledge in Industrial Control Systems/Cyber Security/Network Infrastructure
• Certifications – Security+/ CCNA/ CISSP
• NERC Regulatory Standards/Information Technology Frameworks

Job Overview:

This job interprets, organizes, executes and coordinates assignments.…