OT Security Engineer

Adapture Renewables, Inc. is on a mission to be a leader in this new era of sustainable energy. Drawing upon an extensive knowledge base, we develop, finance, engineer, build, own, and operate high quality utility-scale photovoltaic projects and battery energy storage projects. Our Technology team is looking for a talented OT Security Engineer to help support the efforts of our fast‑growing company.

Adapture Renewables is owned by KIRKBI Climate – the private holding and investment company of the Kirk Kristiansen family founded to build a sustainable future for the LEGO brand through generations.

This position will work in our Technology team and is responsible for designing, implementing, and maintaining cybersecurity controls across ARI’s SCADA and industrial control system (ICS) environments, including the interfaces between site OT networks and our enterprise IT infrastructure. The role owns NERC CIP Low impact compliance across the operating fleet, the vendor security relationships that gate access to our plants, and the security telemetry that feeds our centralized monitoring stack.

This role reports to the Director of Technology & Security. ARI currently partners with an external MSSP for OT security operations. The candidate may be based remotely in the U.S., with regular travel to operating PV and BESS sites and periodic travel to our Bay Area home office.

• Design and implement OT network segmentation between site SCADA, control, and enterprise zones across the operating fleet.
• Own secure remote access for vendors and ARI staff: jump hosts, MFA, session recording, and just-in-time access patterns.
• Deploy and tune EDR on plant servers and engineering workstations within OT reliability constraints.
• Maintain hardened baselines and configuration control for site servers, HMIs, RTUs/RTACs, and OT network equipment.
• Run vulnerability assessment and patch/mitigation cycles for OT assets in coordination with site operations.
• Maintain and execute the technical controls required under CIP-003 R2 Attachment 1 (cyber security awareness, physical access controls, electronic access controls, incident response, and TCA/removable media controls) across all Low impact BES Cyber Systems.
• Maintain BES Cyber System asset inventories and categorization evidence (CIP-002).
• Maintain CIP-013 Low impact supply chain risk management evidence for vendors with electronic access.
• Support CIP-008 incident reporting workflows and CIP-011 information protection requirements.
• Participate in self-certifications, internal controls testing, and external audits; produce audit-quality artifacts.
• Establish and enforce security requirements for SCADA, inverter, and BESS OEMs, ISPs, and field service vendors; review remote access requests; approve or deny based on documented policy.
• Drive contractual and technical supply chain controls in partnership with Procurement and Legal, and train vendor personnel on ARI’s OT security expectations and field procedures.
• Integrate OT telemetry and security logs into ARI’s centralized monitoring stack and tune detections for ICs protocols and operational patterns (Modbus, DNP3, SEL).
• Triage and lead response for OT security events; coordinate with site operations, the Compliance team, and the MSSP/enterprise SOC.
• Develop and run tabletop exercises; maintain CIP-008 playbooks and capture post-incident lessons learned.
• Conduct site visits to operating PV and BESS plants for inventories, validations, and control testing.
• Deliver OT security awareness training for operators, technicians, and vendor partners.
• Contribute to ARI’s broader cybersecurity program, aligned to CIS Controls v8, NIST CSF v2, and the in-progress IEC 62443 and ISO 27001 implementations.

• 3–5+ years in OT/ICS/SCADA security, industrial cybersecurity, or critical infrastructure security; utility, IPP, or owner‑operator experience strongly preferred.
• Bachelor’s degree in Electrical Engineering, Computer Engineering, Cybersecurity, or related discipline, or equivalent demonstrated experience.
• Hands‑on experience implementing and evidencing NERC CIP controls, with direct exposure to…