Senior Cybersecurity Engineer (Center of Excellence)

Job Description Summary

We are looking for a senior OT cybersecurity engineer to join the Grid Automation Cybersecurity Center of Excellence (COE). The COE is a new central team within the Grid Automation OT Cybersecurity Product Line, and it owns how cybersecurity is delivered on Grid Automation projects worldwide.

This is a hands-on role. You will design, build, configure, test and, where needed, commission security solutions on complex utility and industrial projects. You will then turn that work into the standards, templates, scripts and training that regional teams use on every project that follows.

You will be the recognized technical owner for a set of solutions in the GA cybersecurity portfolio. Regional teams will come to you when a project goes beyond their experience.

Projects are grouped into three tiers, and the region manages the customer relationship on all of them. On complex (Tier 1) projects, the COE leads cybersecurity execution. On standard (Tier 2) projects, the region delivers using the COE toolkit, with COE support and training. On routine (Tier 3) projects, the region works independently and the COE reviews key milestones.

You will also make delivery faster and more consistent by automating repeatable work in PowerShell and using frontier AI models to speed up documentation, requirements mapping and configuration reviews.

Job Description

Roles and Responsibilities

Project Execution

• Lead the cybersecurity workstream on Tier 1 projects end to end: requirements review, security architecture, detailed design, build, configuration, FAT, SAT, commissioning and handover.
• Produce the project security deliverables: security plan, zone and conduit model, risk assessment, hardening records, test procedures and reports, and the security handover package.
• Map customer requirements to contract scope early, flag deviations as they arise, and give project managers the technical basis for change orders.

Execution Standards & Toolkit

• Act as the technical owner (Expert) for an assigned set of COE competencies. Set the reference configuration for each and keep it current with product and partner releases.
• Build the GA execution toolkit as a by-product of delivery: reference architectures, configuration baselines, build checklists, PowerShell scripts, how-to guides, test procedures and templates.

Automation

• Write and maintain PowerShell scripts and modules that automate repeatable execution tasks.
• Build automated checks that compare as-built systems against the COE reference baselines and produce the evidence for milestone reviews, FAT and SAT.
• Use frontier AI models to speed up execution work.

Competency building & Specialist Support

• Design and deliver structured technical training for regional engineers, from foundation to advanced level, on the solutions you own.
• Track IEC 62443, NERC CIP, NIS2, CRA, IEC 62351 and regional mandates, and translate new requirements into execution checklists and deliverables.

Required Qualifications

• Bachelor's or master's degree in Electrical, Electronics or Computer Engineering, Computer Science, or equivalent experience, with minumum 8 years in industrial automation or the energy sector, including at least 5 years of hands-on OT cybersecurity delivery on customer projects.
• Applied knowledge of IEC 62443 on real projects (especially parts 3-2, 3-3 and 2-4), working knowledge of NERC CIP, NIS2, CRA, IEC 62351 and NIST, and a sound understanding of substation and grid automation systems and protocols such as IEC 61850, DNP3, IEC 60870-5-104 and Modbus.
• Expert, hands-on skills in at least three of these areas, and working knowledge of most of the others: firewalls (Fortinet preferred), OT network monitoring (Nozomi, Dragos or similar), secure remote access (Xona or similar), Active Directory (Group Policy, RADIUS, LDAP), PKI, SIEM, Centralized security management platforms, application control (Trellix or similar), backup and recovery, Windows and Linux server build (hardening & virtualization), and hardening of field devices (IEDs, RTUs and gateways).
• Working proficiency in PowerShell for Windows Server and Active Directory administration.
• Proven ability to produce security documentation that customers and auditors accept, experience training engineers and willingness to travel 20–40%, including extended site stays and ability to work across time zones.

Desired Characteristics

• Certifications such as GICSP, GRID, ISA/IEC 62443 Cybersecurity Expert, CISSP, Fortinet FCP or FCSS (formerly NSE 4 and NSE 7) or Splunk Core Certified, or vendor training – Nozomi/Dragos.
• Experience as the cybersecurity lead on large utility, data center or industrial projects with multiple vendors and demanding customers.
• Experience building AI-assisted engineering workflows, such as prompt libraries, agent-based tools or API integrations, for documentation, requirements mapping, etc.
• Configuration-as-code and scripting experience: PowerShell DSC or Ansible, Python for Linux.
• Communicates clearly: writes procedures other engineers can follow without help, and explains and defends design decisions with both junior engineers and customer security teams.
• Holds scope boundaries with customers firmly and professionally, knowing this discipline protects both schedule and margin.
• Experience working in a global, multicultural organization. Additional languages are a plus.
• Takes ownership: when a problem appears on one project, fixes the toolkit so it does not happen again.

**For candidates applying to a Canadian-based position, the pay range for this position is between $146,200.00 - $219,200.00 CAD Annual. The specific pay offered may be influenced by a variety of factors, including the candidate’s experience, education, and skill set.

Bonus eligibility: discretionary annual bonus.

This posting is for a new vacancy.

Additional Information

Relocation Assistance Provided: Yes

Candidates should be aware that this role involves a client's critical infrastructure; shortlisted candidates would therefore be subject to heightened security checks as directed by our clients. All personal data will be handled with the utmost confidentiality and in accordance with our data protection policies, solely for recruitment and security purposes.