Senior Cybersecurity Engineer; Center of Excellence

Position: Senior Cybersecurity Engineer (Center of Excellence)
Job Description Summary  We are looking for a senior OT cybersecurity engineer to join the Grid Automation Cybersecurity Center of Excellence (COE). The COE is a new central team within the Grid Automation OT Cybersecurity Product Line, and it owns how cybersecurity is delivered on Grid Automation projects worldwide.
This is a hands-on role. You will design, build, configure, test and, where needed, commission security solutions on complex utility and industrial projects. You will then turn that work into the standards, templates, scripts and training that regional teams use on every project that follows.
You will be the recognized technical owner for a set of solutions in the GA cybersecurity portfolio. Regional teams will come to you when a project goes beyond their experience.
Projects are grouped into three tiers, and the region manages the customer relationship on all of them. On complex (Tier
1) projects, the COE leads cybersecurity execution. On standard (Tier
2) projects, the region delivers using the COE toolkit, with COE support and training. On routine (Tier
3) projects, the region works independently and the COE reviews key milestones.
You will also make delivery faster and more consistent by automating repeatable work in Power Shell and using frontier AI models to speed up documentation, requirements mapping and configuration reviews.

Job Description  

Roles and Responsibilities   Project Execution
Lead the cybersecurity workstream on Tier 1 projects end to end: requirements review, security architecture, detailed design, build, configuration, FAT, SAT, commissioning and handover.
Produce the project security deliverables: security plan, zone and conduit model, risk assessment, hardening records, test procedures and reports, and the security handover package.
Map customer requirements to contract scope early, flag deviations as they arise, and give project managers the technical basis for change orders.
Execution Standards & Toolkit
Act as the technical owner (Expert) for an assigned set of COE competencies. Set the reference configuration for each and keep it current with product and partner releases.
Build the GA execution toolkit as a by-product of delivery: reference architectures, configuration baselines, build checklists, Power Shell scripts, how-to guides, test procedures and templates.
Automation
Write and maintain Power Shell scripts and modules that automate repeatable execution tasks.
Build automated checks that compare as-built systems against the COE reference baselines and produce the evidence for milestone reviews, FAT and SAT.
Use frontier AI models to speed up execution work.
Competency building & Specialist Support
Design and deliver structured technical training for regional engineers, from foundation to advanced level, on the solutions you own.
Track IEC 62443, NERC CIP, NIS2, CRA, IEC 62351 and regional mandates, and translate new requirements into execution checklists and deliverables.

Required Qualifications   Bachelor's or master's degree in Electrical, Electronics or Computer Engineering, Computer Science, or equivalent experience, with minumum 8 years in industrial automation or the energy sector, including at least 5 years of hands-on OT cybersecurity delivery on customer projects.
Applied knowledge of IEC 62443 on real projects (especially parts 3-2, 3-3 and 2-4), working knowledge of NERC CIP, NIS2, CRA, IEC 62351 and NIST, and a sound understanding of substation and grid automation systems and protocols such as IEC 61850, DNP3, IEC 60870-5-104 and Modbus.
Expert, hands-on skills in at least three of these areas, and working knowledge of most of the others: firewalls (Fortinet preferred), OT network monitoring (Nozomi, Dragos or similar), secure remote access (Xona or similar), Active Directory (Group Policy, RADIUS, LDAP), PKI, SIEM, Centralized security management platforms, application control (Trellix or similar), backup and recovery, Windows and Linux server build (hardening & virtualization), and hardening of field devices (IEDs, RTUs and gateways).
Working proficiency in Power Shell for Windows Server and Active Directory administration.
Proven ability to produce security documentation that customers and auditors accept, experience training engineers and willingness to travel 20-40%, including extended site stays and ability to work across time zones.
Desired Characteristics   Certifications such as GICSP, GRID, ISA/IEC 62443 Cybersecurity Expert, CISSP, Fortinet FCP or FCSS (formerly NSE 4…