Principal OT Cybersecurity Infrastructure Engineer

Description

The company designs and delivers railway and other critical-infrastructure systems, and the team works on projects across regions.

The role is a full-time Principal OT Cybersecurity Infrastructure Engineer based in Sydney, Australia. You will be a technical authority for security platforms and work across the project lifecycle, from concept and detailed design through testing, commissioning, handover and ongoing assurance.

You will design, implement, integrate and validate complete OT cybersecurity infrastructure for railway and other critical-infrastructure projects, making sure platforms and controls meet project requirements, international standards and Australian regulatory obligations.

The position suits a self-motivated engineer who handles fast-paced work, from routine administration to strategic decisions.

Responsibilities

• Define vendor-agnostic OT cybersecurity architectures built on zones and conduits, defence in depth, secure segmentation, high availability and resilient design, and set reusable technical standards, reference architectures and integration patterns for all projects and regions.
• Lead the design, configuration, integration and validation of network and perimeter security, identity and access management, threat detection, SOC-enabling tools, data protection, cyber recovery and secure core IT/OT infrastructure.
• Turn IEC 62443, CLC/TS 50701, NIST and ISO requirements into practical controls, and keep a traceable chain from requirements and risk assessments through architecture, implementation, testing and assurance evidence.
• Define and run security FAT and SAT activities, hardening and configuration checks, functional control tests and integration tests with OT subsystems. Support vulnerability reviews, remediation, Security Case inputs and operational acceptance.
• Coordinate with OT, network, systems, SOC, vendor and systems-integration teams, plan technical work, manage dependencies and interfaces, flag delivery risks and report progress clearly.
• Adapt designs to Australian critical-infrastructure, cybersecurity, data-protection and logging obligations while keeping architectural principles reusable. Mentor engineers and shape design decisions across disciplines.

Requirements

• An engineering degree that qualifies you for full membership of Engineers Australia.
• A bachelor's degree in cybersecurity, computer science, information technology, telecommunications, automation, systems engineering or an equivalent technical discipline.
• At least 5 years of professional IT/OT cybersecurity infrastructure experience, including owning architecture and deployment.
• Proven delivery experience in railway, transportation, energy, utilities, oil and gas, or another critical-infrastructure setting.
• Hands-on experience designing, configuring, integrating, testing and commissioning cybersecurity platforms and controls.
• Practical use of IEC 62443, including zones and conduits, defence in depth, security levels, and system and component requirements.
• Experience writing architecture, configuration, hardening, test, assurance and operational handover documents.
• Experience applying CLC/TS 50701 on railway projects.
• Ability to adapt cybersecurity architectures and controls to Australian regulatory, critical-infrastructure, data-protection and logging obligations.
• A master's degree in cybersecurity, information assurance or systems engineering is desirable.
• Experience working with project assurance stakeholders, assessors, regulators, vendors and systems integrators is desirable.
• Desirable certifications: CISSP, CISM or CRISC; GIAC GICSP, GRID or GCIP; IEC 62443 cybersecurity certification.

Conditions

Full-time position based in Sydney, New South Wales, Australia.

Job ID R0149664, posted 2026-10-27, Profession: Engineering & Science.

Employer: the company RAIL STS AUSTRALIA PTY LTD.

The company welcomes applicants of all backgrounds and is an equal opportunity employer.

Benefits

• Annual performance, development and salary review.
• Ongoing professional development and training.
• Salary continuance.
• Year-round health and wellbeing initiatives, including flu vaccinations.
• Employee Assistance Program covering employees and their families.
• Company-sponsored days off per year, on top of statutory public holidays and leave entitlements.
• Invitations to company-sponsored social events throughout the year.