Senior Cybersecurity Engineer (Center of Excellence)

Description

The center is a newly formed central team that sets how cybersecurity is delivered on grid automation projects around the world, as part of the company's OT cybersecurity product line.

This is a senior, hands-on role. You design, build, configure, test and, when needed, commission security solutions on complex utility and industrial work, then convert that work into standards, templates, scripts and training that regional teams reuse on later projects.

You become the named technical authority for a set of solutions in the portfolio, and regional colleagues bring you problems that go beyond their experience.

Projects fall into three tiers. On complex Tier 1 projects the center leads cybersecurity delivery. On standard Tier 2 projects the region delivers using the center's toolkit, with center support and training. On routine Tier 3 projects the region works independently and the center reviews key milestones. The region manages the customer relationship on every tier.

This is a new vacancy.

Responsibilities

• Run the cybersecurity workstream on Tier 1 projects from start to finish: requirements review, security architecture, detailed design, build, configuration, FAT, SAT, commissioning and handover.
• Produce the security deliverables: security plan, zone and conduit model, risk assessment, hardening records, test procedures and reports, and the security handover package.
• Match customer requirements to contract scope early, raise deviations as they arise, and give project managers the technical basis for change orders.
• Act as Expert technical owner for assigned center competencies, set each reference configuration and keep it current with product and partner releases.
• Build the execution toolkit as work proceeds: reference architectures, configuration baselines, build checklists, PowerShell scripts, how-to guides, test procedures and templates.
• Write and maintain PowerShell scripts and modules that automate repeatable execution tasks.
• Build automated checks that compare as-built systems against the center's reference baselines and produce evidence for milestone reviews, FAT and SAT.
• Use frontier AI models to speed up execution work.
• Design and deliver structured technical training for regional engineers, from foundation to advanced level, on the solutions you own.
• Track IEC 62443, NERC CIP, NIS2, CRA, IEC 62351 and regional regulations, and turn new obligations into execution checklists and deliverables.

Requirements

• A bachelor's or master's degree in electrical, electronics or computer engineering, computer science, or equivalent experience, plus at least 8 years in industrial automation or the energy sector, including at least 5 years of hands-on OT cybersecurity delivery on customer projects.
• Practical IEC 62443 experience on real projects, especially parts 3-2, 3-3 and 2-4.
• Working knowledge of NERC CIP, NIS2, CRA, IEC 62351 and NIST.
• Solid understanding of substation and grid automation systems and protocols, including IEC 61850, DNP3, IEC 60870-5-104 and Modbus.
• Expert hands-on skill in at least three of the following areas, and working knowledge of most of the others: firewalls (Fortinet preferred), OT network monitoring (Nozomi, Dragos or similar), secure remote access (Xona or similar), Active Directory (Group Policy, RADIUS, LDAP), PKI, SIEM, centralized security management platforms, application control (Trellix or similar), backup and recovery, Windows and Linux server build with hardening and virtualization, and hardening of field devices such as IEDs, RTUs and gateways.
• Working proficiency in PowerShell for Windows Server and Active Directory administration.
• A record of producing security documentation that customers and auditors accept, experience training engineers, and willingness to travel 20 to 40%, including extended site stays and work across time zones.
• Desired: certifications such as GICSP, GRID, ISA/IEC 62443 Cybersecurity Expert, CISSP, Fortinet FCP or FCSS (formerly NSE 4 and NSE 7), Splunk Core Certified, or vendor training in Nozomi or Dragos.
• Desired: experience as cybersecurity lead on large utility, data center or industrial projects with several vendors and demanding customers.
• Desired: experience building AI-assisted engineering workflows, such as prompt libraries, agent-based tools or API integrations, for documentation and requirements mapping.
• Desired: configuration-as-code and scripting skills, such as PowerShell DSC or Ansible, and Python for Linux.
• Desired: clear communication, writing procedures other engineers can follow without help, and explaining and defending design decisions to junior engineers and customer security teams.
• Desired: firm and professional handling of scope boundaries with customers, since this protects schedule and margin.
• Desired: experience in a global, multicultural organization. Additional languages are a plus.
• Desired: ownership, fixing the toolkit so a problem seen on one project does not recur on another.

Conditions

For Canadian-based positions, the pay range is $146,200.00 to $219,200.00 CAD per year. Actual pay depends on factors such as experience, education and skill set.

Extended site stays and work across time zones are part of the role.

Shortlisted candidates will undergo heightened security checks as directed by the client, because the work involves critical infrastructure.

Personal data is handled confidentially under the company's data protection policies, solely for recruitment and security purposes.

Benefits

• Discretionary annual bonus.
• Relocation assistance is provided.