Senior Network & Cybersecurity Engineer

Job Description Summary

You will be part of a team that defines the substation LAN Networks and ensures Cybersecurity compliance for the HVDC Substation Automation Systems. You will be working on several large global projects involving several stakeholders and knowledge of various cybersecurity standards is essential. Additionally, you will be working within the R&D team supporting with regulatory and technical compliance with international standards and building the roadmap for the future. Key responsibilities include network and application monitoring, security audits, managing endpoint protection, communicating security risks, and ensuring compliance. This role demands strong leadership, risk management, adaptability, and communication skills to protect a company's global Product assets and ensure network security.

Job Description

Roles and Responsibilities

• Strategy Development: Work with the Global Network & Cybersecurity Leader to create and implement a comprehensive HVDC Control & Protection network & cybersecurity strategy that aligns with business goals.

• Team Leadership: Work with the Global Network & Cybersecurity leader to lead and mentor a global team of network & cybersecurity professionals.
• Act as the point of contact for all matters related to cybersecurity and networking in a project environment. This includes evaluating the solutions of various 3rd party suppliers which interface to the control system.
• Support Tendering teams during the bidding process for any cybersecurity and networking related requirements from various customers. Knowledge of a range of Cybersecurity regulations such as EU NIS, NERC and BDEW is essential.
• Support the R&D / NPI team with various network & cybersecurity topics, some of which include: IEC 62443 compliance, threat modelling and incident response.
• Ensures the Secure Deployment Guides for the HVDC Control System and 3rd party system interfaces are adhered to.
• Ensures the Security Assurance Plans are followed by all relevant project stakeholders during the complete project duration.
• Able to perform hardening in a substation environment according to the relevant CIS and NIS guidance.
• Ensure documentation of technical data generated for the assigned projects and/or tasks is in line with engineering policies and procedures.
• Being able to justify solution/analysis/evaluation in front of a customer and technical audience.
• Being able to build functional infrastructure from the ground up (Networking, virtualization, and server operating system configuration).
• Knowledge of industrial control system vulnerability management.
• Knowledge of the industrial patch management process and how this related to vulnerability management.
• Lead the design, configuration and testing required to deliver on time and within defined budgets.
• Follow the department's standard design practices, engineering reviews and guidelines.
• Oversee the testing and FAT witnessing of the Control System.
• Assist site activities relevant to the installation and commissioning of the control system LAN network.
• Deep practical knowledge of the IEC 62443 standard.
• Familiarity with secure remote access architectures using VPN and PKI technologies.
• Knowledge of virtualization platforms such as VMware, HyperV and Proxmox.
• Knowledge of configuring server operating systems
• Knowledge of configuring next generation firewalls
• Knowledge of Intrusion Detection Systems
• Knowledge of anti-malware and disaster recovery tools.
• Knowledge of standard cyber topics such as VPN technologies, Secure Network Access, Endpoint Security, and Network Infrastructure Protection.
• Strong background in Distributed Control Systems / Substation Automation.
• Strong background in designing and configuring Substation LAN's especially within an IEC61850 environment.
• Knowledge of industrial protocols (IEC 61850, IEC 101 / 104, PTP, OPC UA, DNP3, Modbus TCP/IP) and methods to diagnose / debug using Wireshark.
• Experience with one of GE Reason, Westermo, Meinberg products is advantageous.
• Support Site testing/customers which includes site visit to fix the issues.

• Degree in Electronics/Electrical engineering or related field.
• Strong background in Networking & Cybersecurity fields
• Strong experience in control and protection system design
• Knowledge of industrial communication networks such as IEC61850 and Ethernet based protocols.
• Knowledge of communication networks Security/Hardening and Cybersecurity best practices
• Excellent knowledge of commonly used Layer2&3 protocols such as Ipv4, OSPF, LACP, DMZ, VPN/ DMS/ADMS/ DNP, IEC, Modbus
• Experience relevant to electrical power systems and Substation automation engineering.
• Leadership & Mentorship: The ability to lead, coach, and inspire a team is crucial.
• Strategic Thinking: A forward-thinking approach to developing a robust and resilient security posture.
• Technical Proficiency: Deep understanding of network protocols, cybersecurity tools, and threat prevention technologies.
• Risk Management: The ability to identify, assess, and mitigate cybersecurity risks.
• Adaptability: Staying updated and adaptable to new and evolving cyber threats.
• Communication: Excellent verbal and written communication skills to explain complex security issues to both technical and non-technical stakeholders.
• Collaboration: The ability to work effectively with a larger security team and other departments within the organization.