OT Engineer

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Delivery of technical solutions.

• Capable of working independently on specified tasks and deliverables with semi-autonomous oversight, receiving technical support from the Principal Consultant.

• Proficient in facilitating technical client-facing workshops and meetings with client OT engineers, IT teams, and technology stakeholders.

• Skilled in understanding and defining OT network and security designs and architectures that align with OT best practices, IT/OT boundary design, access control models, and more.

• Ability to assist in the evaluation and selection of suitable hardware and software, interpreting specifications to determine core technical requirements.

• Capable of designing with OT constraints in mind, including availability, safety, legacy system dependencies, change management realities, and the operational impact of security controls.

• Responsible for creating technical documentation, including low-level designs, network architecture diagrams, data flows, and firewall rule specifications.

• Ability to communicate design decisions, trade-offs, and dependencies effectively to both technical and non-technical stakeholders as necessary.

• Competent in managing personal workload and task sequencing autonomously, while escalating technical decisions and assurance checkpoints to the Principal Consultant.

• Adept at tracking progress against deliverable milestones and identifying risks or blockers early, coordinating with the project manager as needed.

• Responsible for maintaining clear documentation and audit trails for all artifacts.

• Familiarity with various project management methodologies, including AGILE/SCRUM.

• Contribute to the creation of reusable methodologies, templates, and technical standards within the practice.

• Support proposal development activities as required.

• Identify opportunities for enhancing project delivery and efficiency where applicable.

• Participate in mentoring and upskilling junior team members.

⛳️ Requirements

• Proven experience in technical security delivery within OT/ICS environments, ideally covering network security, architecture design in operational settings, and going beyond assessment, policy, or governance work.

• Understanding the limitations of OT environments, including availability-first priorities, legacy systems, change management constraints, safety-critical considerations, and practical realities of operating in live environments.

• Strong knowledge of network segmentation, IT/OT boundary design, traffic flow analysis, and OT security architectures.

• Familiarity with firewall design, switch configuration concepts, and virtualization in OT or converged IT/OT environments.

• Exceptional documentation skills: capable of producing clear and auditable documents.

• Demonstrated experience in delivering network security initiatives and architecture designs for OT/ICS environments (Desirable).

• Working knowledge of IEC62443 as applied in real-world design delivery, particularly in areas like zones, conduits, and security levels (Desirable).

• Familiarity with CIS and STIG policy standards (Desirable).

• Knowledge of OT technologies such as HMI, PLC, RTU, DCS, and SCADA (Desirable).

• Understanding of common OT network protocols (IEC61850, DNP3, Modbus/TCP) at a network architecture level, including gateways, brokers, and messaging formats (Desirable).

• Experience with multiple vendors of firewalls, switches, and virtualization within OT contexts, favoring a vendor-agnostic approach over single-vendor expertise (Desirable).

• Familiarity with NIST SP 800-82 and NIST 800-53 frameworks (Desirable).

• Experience in supporting procurement or vendor evaluation processes (Desirable).

• Awareness of zero-trust principles in the context of OT network segmentation (Desirable).

• Exposure to software-defined segmentation methodologies for OT networks (Desirable).

• Relevant OT certifications such as IEC 62443 Cybersecurity Expert, GICSP, GRID, or equivalent (Desirable).

• Experience in sectors such as Rail (TS50701), Automotive (ISO/SAE 21434), Renewables (Grid Connection Standards e.g., G99), Manufacturing, or similar OT environments (Desirable).

🏝️ Benefits

• Flexible Working: Enjoy a balance between your work and personal life with our flexible working options.

• Generous Holiday Allowance: Benefit from 25 days of holiday in addition to bank holidays, with the option to purchase up to 5 extra days of annual leave.

• Medicash & Critical Illness Scheme.

• Financial & Investment Benefits: Gain peace of mind through our Pension, Life Assurance, and Share Save Scheme.

• Community & Volunteering Programmes: Contribute positively to your community with our volunteering opportunities.

• Green Car Scheme: Drive environmentally friendly vehicles and save money through our eco-friendly car scheme.

• Cycle Scheme: Maintain your fitness and health with our cycle-to-work initiative.

• Special Time Off: Take time off for significant life events, such as marriage/civil partnership, becoming a grandparent, or welcoming a new pet.

• Family Planning: Take advantage of our generous maternity and paternity leave, along with support and time off for those undergoing fertility treatments.