Senior Cybersecurity Engineer (Center of Excellence)

Description

The company is hiring a senior OT cybersecurity engineer for its new Grid Automation Cybersecurity Center of Excellence, a central team inside the Grid Automation OT Cybersecurity Product Line that sets how cybersecurity is delivered on projects worldwide.

The work is hands-on. You design, build, configure, test and, when needed, commission security on complex utility and industrial projects, then turn that work into standards, templates, scripts and training for regional teams on later projects.

You become the named technical owner for a set of solutions in the portfolio, and regional teams bring you problems that go beyond their experience.

Projects fall into three tiers, and the region manages the customer on every one. On Tier 1 (complex) projects the COE leads cybersecurity execution. On Tier 2 (standard) projects the region delivers using the COE toolkit, with COE support and training. On Tier 3 (routine) projects the region works alone and the COE reviews key milestones.

Responsibilities

• Run the cybersecurity workstream on Tier 1 projects from start to finish, covering requirements review, security architecture, detailed design, build, configuration, FAT, SAT, commissioning and handover.
• Produce the security deliverables: security plan, zone and conduit model, risk assessment, hardening records, test procedures and reports, and the handover package.
• Match customer requirements to contract scope early, raise deviations as they appear, and give project managers the technical basis for change orders.
• Serve as the Expert technical owner for assigned COE competencies, setting each reference configuration and keeping it current as products and partners release updates.
• Build the execution toolkit as you deliver: reference architectures, configuration baselines, build checklists, PowerShell scripts, how-to guides, test procedures and templates.
• Write and maintain PowerShell scripts and modules that automate routine execution tasks.
• Create automated checks that compare as-built systems with COE baselines and produce evidence for milestone reviews, FAT and SAT.
• Use frontier AI models to speed up execution work.
• Design and deliver structured technical training for regional engineers, from foundation to advanced level, on the solutions you own.
• Track IEC 62443, NERC CIP, NIS2, CRA, IEC 62351 and regional mandates, and turn new requirements into execution checklists and deliverables.

Requirements

• A bachelor's or master's degree in electrical, electronics or computer engineering, computer science, or equivalent experience, plus at least 8 years in industrial automation or energy, including at least 5 years of hands-on OT cybersecurity delivery on customer projects.
• Applied IEC 62443 experience on real projects, especially parts 3-2, 3-3 and 2-4.
• Working knowledge of NERC CIP, NIS2, CRA, IEC 62351 and NIST.
• A solid understanding of substation and grid automation systems and protocols such as IEC 61850, DNP3, IEC 60870-5-104 and Modbus.
• Expert, hands-on skill in at least three of the following, and working knowledge of most of the rest: firewalls (Fortinet preferred), OT network monitoring (Nozomi, Dragos or similar), secure remote access (Xona or similar), Active Directory (Group Policy, RADIUS, LDAP), PKI, SIEM, centralized security management platforms, application control (Trellix or similar), backup and recovery, Windows and Linux server build (hardening and virtualization), and hardening of field devices (IEDs, RTUs and gateways).
• Working proficiency in PowerShell for Windows Server and Active Directory administration.
• A proven record of producing security documentation that customers and auditors accept.
• Experience training engineers.
• Willingness to travel 20, 40%, including extended site stays, and to work across time zones.
• Desired: certifications such as GICSP, GRID, ISA/IEC 62443 Cybersecurity Expert, CISSP, Fortinet FCP or FCSS (formerly NSE 4 and NSE 7), Splunk Core Certified, or vendor training in Nozomi or Dragos.
• Desired: experience as the cybersecurity lead on large utility, data center or industrial projects with multiple vendors and demanding customers.
• Desired: experience building AI-assisted engineering workflows, such as prompt libraries, agent-based tools or API integrations, for documentation, requirements mapping and similar work.
• Desired: configuration-as-code and scripting experience, such as PowerShell DSC or Ansible, and Python for Linux.
• Desired: clear communication. You write procedures other engineers can follow without help, and you explain and defend design decisions to junior engineers and customer security teams.
• Desired: firm, professional handling of scope boundaries with customers, understanding that this protects both schedule and margin.
• Desired: experience in a global, multicultural organization. Additional languages are a plus.
• Desired: ownership. When a problem appears on one project, you fix the toolkit so it does not recur.

Conditions

This is a remote position.

Travel of 20, 40%, including extended site stays.

For US-based roles the pay range is $131,700.00 to $219,300.00. The company pays a geographic differential of 110%, 120% or 130% of salary in certain areas. Actual pay depends on experience, education and skill set.

Relocation assistance is provided.

Only candidates legally authorized to work in the United States can be employed for this opening.

Any offer is conditional on successful completion of a drug screen, where applicable.

Shortlisted candidates may face heightened security checks as directed by clients, because the role involves critical infrastructure.

The posting is expected to stay open for at least seven days after it was posted on October 23, 2026.

Benefit plans can be changed or ended at any time at the company's discretion, and no individual has a vested right to them.

Benefits

• Discretionary annual bonus.
• Medical, dental, vision and prescription drug coverage.
• Access to Health Coach, a 24/7 nurse-based resource.
• Employee Assistance Program with 24/7 confidential assessment, counseling and referral services.
• The company Retirement Savings Plan, a tax-advantaged 401(k) with company matching and company retirement contributions, plus Fidelity resources and financial planning consultants.
• Tuition assistance, adoption assistance, paid parental leave, disability benefits, life insurance, 12 paid holidays and permissive time off.