OT Cybersecurity and Networking Systems Senior Engineer

Basic Job Description

The overall responsibility of the OT Cybersecurity and Networking Systems Engineer is to be an active member of the system engineering team delivering substation automation solutions, providing technical cyber and networking guidance for Substation Automation Solutions. Apply knowledge of cybersecurity and complex communication networking using utility OT communication infrastructure practices and theories in determining equipment configuration and performance. This position is responsible for the Operational Technology control system cybersecurity lifecycle support and system project execution of the security concept, security solution design, cyber asset inventory development, cyber risk assessment, factory and site acceptance testing, commissioning and cyber audit documentation according to customer and Hitachi Energy practices and policies.

The role will also be a key player in the organizational process improvements related to cybersecurity policy and procedure development based on industry cybersecurity standards and regulations.

Key elements to this position are the ability to:

• understand customer issues, cybersecurity and networking challenges, cybersecurity requirements for Industrial Control Systems, Electric Energy Operational Technology Control Systems and regulatory cybersecurity requirements
• coordinate cyber security discipline and support project execution across several projects concurrently
• provide technical support for project testing, installation and commissioning activities and ensure necessary documentation is prepared to support cybersecurity audits and compliance per customer and company policies
• assess and develop cybersecurity practices aligned with policies and ISA/IEC 62443/ISO 27001 procedures
• explain cybersecurity applications and network architecture apply engineering analysis, and diagnose application related issues in the evaluation, engineering and commissioning of the substation automation solution

As a Substation Automation Cybersecurity and Networking System Engineer, it is necessary to:

• have a thorough understanding and experience of substation automation system and cybersecurity architecture development, design & engineering, commissioning, asset inventory creation and audit documentation and best practices
• be able to architect, engineer, test and diagnose IEC 61850 station and process bus solutions
• have implementation and audit experience with NERC CIP, ISA/IEC 62443 and IEEE/IEC Cybersecurity standards and their applicability in a utility and industrial automation environment
• have a sound understanding and experience of Transmission and Distribution protection, control and automation principles
• properly transfer customer cybersecurity and networking requirements (both known and anticipated) into technical specifications and optimized architecture and system design based on industry standards and regulations
• ability to represent the company in industry conferences and standardization activities
• ability to collect essential cybersecurity information, assess implementation and execution to policies and procedures and prepare documentation support cybersecurity audits

Requires detailed knowledge and experience of protection, control and automation systems, communication networks, IEC
61850/IEC
62351 standards, and utility protection, control and automation practices. Must be able to assess various system architectures and utility policies/practices to support the utilities compliance towards the NERC / CIP standards and working knowledge of ISA/IEC 62443 and ISO 27001 standard series applicable for organizations, products and system project execution. Should be familiarized with protection and control products and complete SA products portfolio (IED’s, Gateways & HMI & control software) as they are applied to Hitachi Energy Substation Automation system solutions.

Be the subject matter expert in cybersecurity and communication networking to support multiple engineering disciplines (such as protection systems, communications, project management, engineering economics) in the design and delivery of engineered system deliveries.

• Bachelor's Degree in Engineering or related field and a minimum of 8 years of experience OR a Master's Degree in Engineering or related field and a minimum of 6 years experience
• Alternatively, Bachelor’s Degree in Computer Science OR Information Technology with 8 years experience in the Industrial Control System (ICS) or Electric Energy Operation Technology Control Systems cybersecurity solutions
• Knowledge of cyber security standards (IEC 62351, ISA/IEC 62443, ISO
  27001, NERC CIP, IEEE 1686) utilized in designing communication architectures for typical utility and industrial control systems
• Relevant industry cyber certification(s) such as SANS, CISSP, Cisco CCNA/CCNP, or equivalent
• Experience leading cyber security assessments throughout the system lifecycle, identify cyber…