OT/IT Systems Analyst (Senior) - Operations & Compliance

Description

• Support ongoing development projects and ensure security is integrated.
• Analyze network logs and events to address security incidents proactively and reactively.
• Participation in on-call rotations or incident response activities as needed.
• Ensure NERC/CIP compliance and support security and operational objectives.
• Configure, update, and maintain various network devices including switches, firewalls, IDS, and associated systems.
• Coordination between various teams in support of the Bulk Electric System.
• Plan, coordinate, and execute OT cybersecurity assessments in collaboration with internal teams, third parties, and site engineers.
• Travel to generation sites, and control rooms as required (up to 20%).
• Support incident response, including root cause analysis, containment, and corrective actions.
• Participate in an 24/7 On-Call rotation that directly supports operational control and visibility of the Bulk Electric System.
• Troubleshoot and resolve network security issues efficiently.
• Participate in the design and validation of cybersecurity architectures that span both IT and OT environments — ensuring practical, fit-for-purpose solutions.
• Conduct tabletop exercises, incident simulations, and post-event reviews to validate operational readiness and continuous improvement.

Requirements

• Experience supporting or leading NERC CIP audit or evidence collection processes.
• Servers (Windows/Linux), virtualization (VMware/Proxmox), and backup (Commvault/Veeam).
• Practical knowledge of risk assessment, incident response, and continuous monitoring in OT networks.
• Endpoint protection/EDR platforms (CrowdStrike, Microsoft Defender).
• Network segmentation, firewalls (Fortinet, Palo Alto,), and industrial DMZ design.
• Familiarity with identity and access management (Active Directory, Okta, Azure AD), vulnerability scanning and service management (ServiceNow).
• Comfortably operating in imperfect environments with legacy systems and resource constraints.
• Strong sense of ownership and accountability — drives initiatives from concept to closure.
• Strong analytical, documentation, and communication skills; able to translate technical risks into business terms.
• Collaborative communicator who can align IT, OT, and business functions toward shared goals.
• 7+ years of combined IT/OT experience, including 2+ years in industrial cybersecurity or compliance-driven environments (e.g., SCADA, PLCs, DCS, plant operations).
• Hands On experience Firewall Rule analysis, Network, Hosting
• Hands-on experience with OT infrastructure and cybersecurity controls including:
• Experience with physical security systems (e.g., CCURE, camera systems, sensors) and supporting compliance documentation.
• Convey complex technical concepts to both technical and non-technical individuals and teams.
• Bachelor’s degree in IT, Computer Science, Cybersecurity, Industrial Automation, related field, or experience.
• Applies common sense and sound judgment when navigating complex or ambiguous situations.
• Asset inventory and monitoring tools (Industrial Defender, Nozomi, Claroty, Dragos).
• Strong understanding of NERC CIP compliance, and industrial cybersecurity frameworks (NIST SP 800-82, IEC 62443).
• Professional certifications such as CISSP, CISM, GCIP, GICSP, or equivalent.
• Background in the utilities, energy, or manufacturing industries.

Benefits

• Hybrid work arrangement (2–3 days onsite in Allentown).

Training + Development

Interview process

Visa Sponsorship

Security clearance