Senior Network and Cybersecurity Engineer

Job Description SummaryThis is a senior technical engineering leadership role, operating as the bridge between technical execution and project management. As a primary authority for HVDC Control and Protection, you will contribute to the technical strategy for Network and Cybersecurity, drive excellence in secure architectural design and mentor the engineering team. Working across large scale global projects involving multiple stakeholders, you will lead the full lifecycle, from requirements and design to implementation and development of digital control and Substation Automation Systems. You will serve as the go to expert, ensuring that both internal projects and external stakeholder delivery meet the highest standards of innovation, security, reliability and quality.

Job Description

Candidates who possess most of the experience outlined below and demonstrate strong motivation to develop expertise in the remaining areas are strongly encouraged to apply. We recognize the multifaceted nature of this role and value both proven experience and a genuine commitment to professional growth.

Leadership and Impact

• Technical Authority and Governance: Serve as the Technical Authority for Network and Cybersecurity domains. You will steer technical direction, approve design choices, and ensure alignment across global, large-scale projects.
• Influential Leadership: Drive engineering excellence. You will act as a mentor, fostering a culture of technical rigor and innovation, and act as a coach for junior and mid-level engineers.
• Strategic Stakeholder Management: Translate complex technical strategies into clear business impacts for senior leadership and customers. You will advocate for the team’s technical strategy and facilitate open dialogue between cross functional teams and external suppliers.
• Innovation Champion: Proactively identify project risks and technical debt, driving timely resolution and implementing continuous improvements in engineering processes, Network and Cybersecurity standards, quality, and best practices.
• Decision Making: Operate with autonomy. You are empowered to make high-stakes technical decisions and pull in specialized experts when necessary to ensure successful delivery.

Key Responsibilities

• Design and Architecture: Lead the end-to-end design of secure networks and communication architectures, adhering to IEC 62443 3 3 principles. Build functional infrastructure from the ground up (Networking, virtualization, server OS).
• Compliance and Lifecycle: Ensure adherence to Secure Deployment Guides and Security Assurance Plans. Manage vulnerability monitoring, patch management and disaster recovery processes.
• Technical Oversight: Define IP address strategies, perform substation level hardening, and evaluate Network and Cybersecurity solutions from 3rd party suppliers.
• Tendering and Regulatory Support: Support bidding processes with knowledge of regulations such as EU NIS, NERC, and BDES; map requirements between varying Network and Cybersecurity standards.
• Operational Execution: Lead design, configuration, and testing to meet project budgets and schedules. Oversee FAT (Factory Acceptance Testing) and assist with on-site installation and commissioning of LAN networks.
• Documentation: Ensure all technical documentation aligns with engineering policies and procedures, including appropriate confidentiality levels.

Qualifications and Experience

• Technical Foundation: Proven expertise in Industrial Networking, Systems Architecture, or Cybersecurity. You should possess relevant technical knowledge gained through either a degree in a related field OR equivalent industry recognized certifications (e.g., GICSP, ISA/IEC 62443 Expert, CCNP, CCIE, VCP).
• Domain Expertise: Experience in industrial control and protection system design, specifically within Distributed Control Systems and Substation Automation (IEC 61850 environments).
• Cybersecurity Standards: Applied expertise in IEC 62443 standards (parts 4 1, 4 2, 3 3, 2 4) and hands on experience with firewalls (Fortinet), IDS (Nozomi, Radiflow), VPN/PKI, and endpoint security.
• Networking: Excellent knowledge of Layer 2 and 3 protocols (IPv4, OSPF, VRRP, LACP, SNMP, SSH, SFTP). Ability to build functional infrastructure from the ground up.
• Systems and Infrastructure: Experience with virtualization (VMware, HyperV, Proxmox) and Windows Server configuration.
• Industrial Protocols: Proficient in IEC 101/104, PTP, OPC UA, DNP3, Modbus TCP/IP and diagnostic debugging using Wireshark.
• Product Familiarity: Experience with GE Reason, Westermo, or Meinberg products is advantageous.

Additional Information