Lead Consultant – Cybersecurity Commissioning, Verification & Validation

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee cybersecurity commissioning efforts for both new and existing industrial and cyber-physical settings.

• Convert cybersecurity requirements, standards, and design specifications into actionable commissioning and verification procedures.

• Create commissioning plans, verification checklists, test scripts, evidence requirements, and acceptance criteria.

• Collaborate on cybersecurity commissioning with engineering, construction, integration, and operational readiness initiatives.

• Confirm cybersecurity requirements prior to operational acceptance and document any technical risks.

• Direct cybersecurity verification and validation efforts across operational technology (OT) and cyber-physical systems.

• Assess controls against design documentation, approved architectures, client specifications, and relevant standards.

• Conduct configuration reviews, evidence inspections, system observations, targeted testing, and stakeholder walkthroughs.

• Examine system architectures, network diagrams, control narratives, security requirements, configurations, and engineering documentation.

• Coordinate execution with clients, engineering teams, system integrators, original equipment manufacturers (OEMs), and other stakeholders.

• Monitor findings, evidence, dependencies, retesting needs, and remediation progress.

• Generate commissioning records, validation reports, findings, and final technical outputs.

• Carry out onsite and remote validation activities in industrial and cyber-physical environments.

• Manage testing to minimize disruptions to production, availability, safety, and system functionality.

• Assist in troubleshooting, root-cause analysis, remediation, targeted retesting, and closure activities.

• Implement cybersecurity standards such as ISA/IEC 62443, NIST SP 800-82, ISA84.00.09 v3 (2024), and PLC Top 20 Secure Programming Practices.

• Contribute to consistent commissioning and verification and validation (V&V) methodologies, procedures, checklists, templates, and technical guidance.

• Aid in the development of representative laboratory environments and the evaluation of OT cybersecurity validation tools.

• Offer technical guidance to consultants and engineers while mentoring junior team members.

• Perform onsite assessments and audits in industrial environments, including oil rigs, refineries, and processing plants.

• Travel frequently to domestic and international client locations, including offshore, remote, and industrial environments.

⛳️ Requirements

• 7+ years of pertinent experience in operational technology, industrial automation, control systems engineering, industrial cybersecurity, commissioning, systems integration, systems or component validation, engineering assurance, or related cyber-physical environments.

• Hands-on experience with industrial control systems and their associated infrastructure.

• Experience in executing technical testing, commissioning, verification, validation, assurance, or system acceptance processes.

• Background working directly with technical teams in industrial settings, critical infrastructure, data centers, manufacturing, utilities, Oil & Gas, or similar operational environments.

• Proficient in reviewing engineering documentation, architecture diagrams, system configurations, technical requirements, and implementation evidence.

• Skilled in documenting technical findings and crafting practical remediation recommendations.

• Capability to develop structured test procedures and objectively assess whether requirements have been effectively implemented.

• Understanding of industrial cybersecurity architecture and the implementation of security controls.

• Familiarity with ISA/IEC 62443 (2-1, 3-3, 3-2, 4-2), NIST SP 800-82, ISA84.00.09 v3 (2024), PLC Top 20 Secure Programming Practices, and cyber-informed engineering principles.

• Comprehension of how cybersecurity activities relate to engineering, construction, integration, commissioning, operations, and system lifecycle processes.

• Willingness to travel to client locations as necessary.

• Extensive knowledge of PLC-based control systems, DCS, SCADA, BMS/BAS, SIS, industrial networks, and field devices.

• Understanding of industrial network architectures, segmentation, zones and conduits, firewalls, remote access, and security boundaries.

• Ability to provide technical guidance, review technical deliverables, and mentor junior staff.

• Strong troubleshooting and root-cause analysis capabilities.

• Meticulous attention to technical details.

• Proven commitment to safety in operational systems and industrial environments.

• Capability to manage multiple technical workstreams and dependencies.

• Ability to walk, stand, and move about for extended durations; climb stairs, ladders, or elevated structures; and lift items up to 25 pounds.

• Willingness to work across various time zones and adapt to client schedules.

• Certifications are not mandatory; however, preferred certifications include ISA/IEC 62443, GICSP, CISSP, industrial automation or control system vendor certifications, relevant commissioning/engineering/networking/cybersecurity certifications, and OSHA or ISA84 safety certifications.

🏝️ Benefits

• Competitive salary and benefits package.

• Commitment to equal opportunity employment.

• Reasonable accommodations provided for individuals with disabilities.

• Potential for remote work, including virtual assessments and audits where applicable.