Lead Network & Cybersecurity Engineer

Description

• Analyse and evaluate different cybersecurity and networking solutions.
• Ensures the Security Assurance Plans are followed by all relevant project stakeholders during the complete project duration.
• Lead the design of secure networks and Communication Architectures of the HVDC Control System from concept to commissioning based on the principles set out in IEC 62443-3-3.
• Define IP address strategies for the complete control system.
• Configuring next generation firewalls such as Fortinet.
• Share engineering information and promote open dialogue.
• Justify solution / analysis / evaluation in front of a customer and technical audience.
• Ensures the Secure Deployment Guides for the HVDC Control System and 3rd party system interfaces are adhered to.
• Oversee the testing and FAT witnessing of the Control System.
• Lead Network & Cybersecurity Engineer requirements.
• Support Tendering teams during the bidding process for any cybersecurity and networking related requirements from various customers. Knowledge of a range of Cybersecurity regulations such as EU NIS, NERC and BDES is essential.
• Lead the design, configuration and testing required to deliver on time and within defined budgets.
• Ensure documentation of technical data generated for the assigned projects and/or tasks is in line with engineering policies and procedures.
• Build functional infrastructure from the ground up (Networking, virtualization, and server operating system configuration).
• Act as the point of contact for all matters related to cybersecurity and networking in a project environment. This includes evaluating the solutions of various 3rd party suppliers which interface to the control system.
• Assist site activities relevant to the installation and commissioning of the control system LAN network.
• The process for monitoring vulnerability publications.
• Follow the department’s standard design practices, engineering reviews and guidelines.
• Configuring server operating systems, i.e. Windows Server.

Requirements

• Virtualization platforms such as VMware, HyperV and Proxmox.
• industrial protocols (IEC 61850, IEC 101 / 104, PTP, OPC UA, DNP3, Modbus TCP/IP) and methods to diagnose / debug using Wireshark.
• Excellent knowledge of commonly used protocols such as OSPF, VRRP, LACP, SNMP, SSH, SFTP.
• Advanced background in Distributed Control Systems / Substation Automation.
• Anti-malware, patch management and disaster recovery tools.
• IEC 62443 standard, mainly parts 4-1, 4-2, 3-3 and 2-4.
• Knowledge of Network Security / Hardening and Cybersecurity best practices.
• Documentation to be provided with the associated level of confidentiality.
• An excellent background in designing and configuring Substation LAN’s especially within an IEC61850 environment.
• To be familiar with the patch management process to correct vulnerabilities published.
• Intrusion Detection Systems such as Nozomi, Radiflow.
• Standard cyber topics such as VPN technologies, Secure Network Access, Endpoint Security, and Network Infrastructure Protection.
• Being able to map requirements between different cybersecurity standards.
• Degree level Qualification in Communication engineering or related field.
• Experience with one of GE Reason, Westermo, Meinberg products is advantageous.
• Knowledge of industrial protocols (IEC 61850, IEC 101 / 104, PTP, OPC UA, DNP3, Modbus TCP/IP) and methods to diagnose / debug using Wireshark.
• Able to perform hardening in a substation environment.

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance