Senior Network and Cybersecurity Engineer

• Responsible for overall design of secure networks and Communication Architectures of the HVDC Control System from concept to commissioning based on the principles set out in IEC 62443-3-3.
• Act as the point of contact for all matters related to cybersecurity and networking in a project environment. This includes evaluating the solutions of various 3rd party suppliers which interface to the control system.
• Support Tendering teams during the bidding process for any cybersecurity and networking related requirements from various customers. Knowledge of a range of Cybersecurity regulations such as EU NIS, NERC and BDES is essential.
• Ensures the Secure Deployment Guides for the HVDC Control System and 3rd party system interfaces are adhered to.
• Ensures the Security Assurance Plans are followed by all relevant project stakeholders during the complete project duration.
• Define IP address strategies for the complete control system.
• Able to perform hardening in a substation environment.
• Share engineering information and promote open dialogue.
• Ensure documentation of technical data generated for the assigned projects and/or tasks is in line with engineering policies and procedures.
• Being able to map requirements between different cybersecurity standards.
• Being able to analyze and evaluate different cybersecurity and networking solutions.
• Being able to justify solution/analysis/evaluation in front of a customer and technical audience.
• Being able to build functional infrastructure from the ground up (Networking, virtualization, and server operating system configuration).
• Knowledge of the process for monitoring vulnerability publications.
• To be familiar with the patch management process to correct vulnerabilities published.
• Knowledge of documentation to be provided with the associated level of confidentiality.
• Lead the design, configuration and testing required to deliver on time and within defined budgets.
• Follow the department’s standard design practices, engineering reviews and guidelines.
• Oversee the testing and FAT witnessing of the Control System.
• Assist site activities relevant to the installation and commissioning of the control system LAN network.
• Lead Network & Cybersecurity Engineer requirements.
• Qualification in Communication engineering or related field.
• Knowledge of IEC 62443 standard, mainly parts 4-1, 4-2, 3-3 and 2-4.
• Familiarity with secure remote access architectures using VPN and PKI technologies.
• Knowledge of virtualization platforms such as VMware, HyperV and Proxmox.
• Knowledge of configuring server operating systems, i.e. Windows Server.
• Knowledge of configuring next generation firewalls such as Fortinet.
• Knowledge of Intrusion Detection Systems such as Nozomi, Radiflow.
• Knowledge of anti-malware, patch management and disaster recovery tools.
• Knowledge of network monitoring and management.
• Knowledge of standard cyber topics such as VPN technologies, Secure Network Access, Endpoint Security, and Network Infrastructure Protection.
• Strong background in Distributed Control Systems / Substation Automation.
• Strong background in designing and configuring Substation LAN’s especially within an IEC61850 environment.
• Knowledge of Network Security / Hardening and Cybersecurity best practices.
• Excellent knowledge of commonly used protocols such as OSPF, VRRP, LACP, SNMP, SSH, SFTP.
• Knowledge of industrial protocols (IEC 61850, IEC 101 / 104, PTP, OPC UA, DNP3, Modbus TCP/IP) and methods to diagnose / debug using Wireshark.
• Experience with one of GE Reason, Westermo, Meinberg products is advantageous.
• Support Site testing/customers which includes site visit to fix the issues.

Required Qualifications

• Degree in Electronics/Electrical engineering or related field.
• Strong background in Networking & Cybersecurity fields  
• Extensive years of experience in control and protection system design
• Knowledge of industrial communication networks such as IEC61850 and Ethernet based protocols.
• Control & Protection Relay logics Design techniques
• Knowledge of communication networks Security/Hardening and Cybersecurity best practices
• Excellent knowledge of commonly used Layer2&3 protocols such as Ipv4, OSPF, LACP, DMZ, VPN/ DMS/ADMS/ DNP, IEC, Modbus
• Experience relevant to electrical power systems and Substation automation engineering.

Desired Characteristics

• Strong oral and written communication skills. Strong interpersonal and leadership skills. Demonstrated ability to analyze and resolve problems. Demonstrated ability to lead programs / projects. Ability to document, plan, market, and execute programs. Established project management skills.
• Proven technical leadership in a complex system engineering development environment.
• Proactively serves on cross functional leadership teams; Makes decisions independently; Pulls in experts when needed.
• Demonstrates track record of designing quality systems/components that exceed design reqs, beat cost targets, and exceed reliability targets.