Lead Network and Cybersecurity Engineer

Description

The company designs advanced grid technologies to electrify the world and speed up the move to a more efficient, greener grid.

With a focus on growth and sustainability, the company helps connect renewable energy to the grid as it works toward carbon neutrality.

The work centres on renewable energy projects that are varied and demand a solution-focused, positive approach.

Candidates who meet most of the experience listed below and are committed to building skills in the remaining areas are encouraged to apply.

This is a hands-on engineering role as a key member of a project team, delivering secure network and cybersecurity solutions. As an experienced HVDC control and protection practitioner, you will help implement network and cybersecurity standards, improve secure architecture design, and support the wider engineering team. You will work on global projects with many stakeholders and own specific workstreams from design and configuration through testing and commissioning of digital control and substation automation systems. You will be a dependable technical resource for security, reliability and quality.

Responsibilities

• Build and maintain secure network and communication architectures aligned with IEC 62443-3-3, including networking, virtualization and server OS configuration.
• Implement the technical side of network and cybersecurity standards, check design choices, and keep designs aligned with global standards across project tasks.
• Plan and apply IP address schemes, harden substations, and assess network and cybersecurity solutions from third-party suppliers.
• Carry out design, configuration and testing within project budgets and schedules, and handle on-site LAN installation and commissioning.
• Support FAT (Factory Acceptance Testing) and take part in the wider engineering team by advising junior engineers.
• Make technical decisions independently on assigned work packages within project limits, and escalate high-stakes problems to senior leads.
• Identify technical risks early, help resolve them, and improve engineering processes and cybersecurity practice.
• Translate technical requirements into project tasks, and communicate progress and security needs between internal teams and external suppliers.
• Keep vulnerability monitoring, patch management and disaster recovery processes running, following Secure Deployment Guides and Security Assurance Plans.
• Support bids using knowledge of regulations such as EU NIS, NERC and BDEW, and map requirements between different standards.
• Ensure all technical documents follow engineering policies and procedures, with the right confidentiality levels.

Requirements

• Proven expertise in industrial networking, systems architecture or cybersecurity, backed by a related degree or recognized certifications such as GICSP, ISA/IEC 62443 or CCNA/CCNP.
• Experience designing industrial control and protection systems, particularly distributed control systems and substation automation under IEC 61850.
• Working knowledge of IEC 62443 parts 4-1, 4-2, 3-3 and 2-4, with hands-on use of Fortinet firewalls, Nozomi and Radiflow intrusion detection, VPN/PKI and endpoint security.
• Strong understanding of Layer 2 and Layer 3 protocols, including IPv4, OSPF, VRRP, LACP, SNMP, SSH and SFTP, and the ability to build working infrastructure.
• Experience with virtualization platforms (VMware, HyperV, Proxmox) and Windows Server configuration.
• Proficiency with IEC 101/104, PTP, OPC UA, DNP3 and Modbus TCP/IP, and diagnosing faults with Wireshark.
• Experience with Reason, Westermo or Meinberg products is advantageous.

Conditions

Relocation assistance is not provided.