OT Cyber Security Engineer - Commissioning

We are looking for experienced OT Cyber Security Engineers to support the commissioning, testing, integration, and handover of Operational Technology (OT) Cyber Security systems for power and energy projects. The role will involve hands-on site activities related to OT network security, industrial firewalls, network segmentation, secure remote access, SIEM/logging, endpoint security, security monitoring, hardening, vulnerability remediation, and cybersecurity compliance. The candidate will work closely with SCADA, EMS/EPMS, PPC, RTU, PLC, protection, telecom, networking, and IT teams, as well as OEMs, clients, and EPC stakeholders, to ensure successful commissioning and compliance with project cybersecurity requirements. Key Responsibilities1. OT Cyber Security Commissioning • Execute commissioning and site acceptance activities for OT Cyber Security systems. • Configure, test, troubleshoot, and validate OT security infrastructure at project sites. • Perform installation and commissioning of: • Industrial firewalls • OT switches and network security devices • Network segmentation / DMZ infrastructure • Secure remote access solutions • SIEM / security monitoring systems • Antivirus / EDR solutions • Jump servers / bastion hosts • Patch management solutions • OT asset monitoring systems • Verify cybersecurity architecture against approved project design and engineering documents. • Perform functional testing and SAT activities for OT Cyber Security systems. 2. OT Network & Firewall • Configure and troubleshoot industrial firewalls and security appliances. • Implement and verify firewall rules, NAT, routing, VPN and access-control policies. • Verify network segmentation between: • IT and OT networks • Control network and process network • OT DMZ • Engineering stations • SCADA/EMS/EPMS systems • Remote access zones • Perform firewall rule validation and connectivity troubleshooting. • Review network traffic and identify unauthorized or unexpected communication. 3. Cybersecurity Hardening • Perform hardening of OT servers, workstations, engineering stations and network devices. • Implement security baselines in accordance with approved project requirements. • Support: • Windows hardening • Account and password policies • USB/device control • Application whitelisting • Security patches • Antivirus/EDR configuration • Disablement of unnecessary services and ports • Secure protocols and communication • Verify compliance with approved cybersecurity checklists and standards. 4. Testing & SAT • Prepare and execute OT Cyber Security test procedures. • Conduct FAT/SAT, functional testing and integrated system testing. • Perform point-to-point and end-to-end connectivity verification. • Verify cybersecurity controls including: • Firewall rule enforcement • Network segmentation • User authentication • Remote access • Logging and monitoring • Antivirus/EDR • Backup and recovery • Alarm/event generation • Security incident logging • Record test results and prepare test reports. • Identify, troubleshoot and close cybersecurity punch points. 5. SIEM / Monitoring • Configure and validate collection of security logs from OT assets. • Integrate firewalls, servers, switches and critical OT systems with SIEM/security monitoring platforms. • Verify log forwarding, event generation, timestamps and alarm/event visibility. • Support cybersecurity monitoring and incident investigation during commissioning. 6. Vulnerability & Compliance • Support OT vulnerability assessment and remediation activities. • Review vulnerability scan results and coordinate remediation with OEMs/system vendors. • Validate closure of cybersecurity observations and compliance gaps. • Maintain cybersecurity compliance matrices and punch-list trackers. • Support client audits, cybersecurity assessments and site inspections. • Ensure all commissioning activities comply with applicable project cybersecurity requirements. 7. Documentation Prepare/review Commissioning And Cybersecurity Documentation Including • Cybersecurity commissioning procedures • FAT/SAT procedures and reports • Firewall rule matrices • Network architecture diagrams • OT asset lists • IP address lists • Port/service matrices • User/access matrices • Hardening checklists • Vulnerability assessment reports • Cybersecurity compliance matrices • Punch-list closure reports • As-built cybersecurity documentation • Operation & maintenance documentation 8. Coordination • Coordinate with Project Engineering, Commissioning, SCADA/EPMS, Telecom, Networking and Control System teams. • Coordinate with OEMs and cybersecurity solution vendors. • Interface with client/consultant cybersecurity and commissioning teams. • Participate in daily coordination meetings and commissioning planning. • Support troubleshooting and resolution of site cybersecurity issues. • Provide technical inputs for project schedule and commissioning planning. Required Technical Skills The Candidate Should Have Hands-on Knowledge Of • OT/ICS Cyber Security • SCADA/EMS/EPMS environments • Industrial Ethernet and TCP/IP networking • VLANs and network segmentation • Firewalls and access-control policies • DMZ architecture • VPN and secure remote access • Windows Server / Windows client security • Active Directory and Group Policy • SIEM and security logging • Antivirus / EDR • Vulnerability assessment • Patch management • Network troubleshooting • Packet capture and traffic analysis • Cybersecurity hardening • Incident detection and troubleshooting Preferred OT / Industrial Knowledge Experience with one or more of the following is preferred: • SCADA • EMS/DMS • EPMS • RTU • PLC • Protection systems • Substation automation • Power plant control systems • Renewable energy control systems • PPC • BESS • Industrial communication protocols such as: • IEC 61850 • IEC 60870-5-104 • Modbus TCP/IP • DNP3 • OPC/OPC UA Standards & Frameworks Knowledge Of Applicable OT Cybersecurity Standards And Frameworks, Preferably • IEC 62443 • IEC 62351 • ISO 27001 • NIST Cybersecurity Framework • NIST SP 800-82 • Saudi Aramco / client-specific OT cybersecurity requirements, where applicable • Project-specific cybersecurity standards and specifications Qualifications • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Electrical Engineering, Electronics & Communication Engineering, or a related discipline. • Typically 3-5 Year of experience in OT/ICS Cyber Security, preferably with significant site commissioning experience. • Candidates with strong hands-on commissioning e

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Electrical Engineering, Electronics & Communication Engineering, or a related discipline. Typically 3-5 Year of experience in OT/ICS Cyber Security, preferably with significant site commissioning experience.

1. OT Cyber Security Commissioning: Execute commissioning and site acceptance activities for OT Cyber Security systems. Configure, test, troubleshoot, and validate OT security infrastructure at project sites. Perform installation and commissioning of: Industrial firewalls; OT switches and network security devices; Network segmentation / DMZ infrastructure; Secure remote access solutions; SIEM / security monitoring systems; Antivirus / EDR solutions; Jump servers / bastion hosts; Patch management solutions; OT asset monitoring systems. Verify cybersecurity architecture against approved project design and engineering documents. Perform functional testing and SAT activities for OT Cyber Security systems. 2. OT Network & Firewall: Configure and troubleshoot industrial firewalls and security appliances. Implement and verify firewall rules, NAT, routing, VPN and access-control policies. Verify network segmentation between: IT and OT networks; Control network and process network; OT DMZ; Engineering stations; SCADA/EMS/EPMS systems; Remote access zones. Perform firewall rule validation and connectivity troubleshooting. Review network traffic and identify unauthorized or unexpected communication. 3. Cybersecurity Hardening: Perform hardening of OT servers, workstations, engineering stations and network devices. Implement security baselines in accordance with approved project requirements. Support: Windows hardening; Account and password policies; USB/device control; Application whitelisting; Security patches; Antivirus/EDR configuration; Disablement of unnecessary services and ports; Secure protocols and communication. Verify compliance with approved cybersecurity checklists and standards. 4. Testing & SAT: Prepare and execute OT Cyber Security test procedures. Conduct FAT/SAT, functional testing and integrated system testing. Perform point-to-point and end-to-end connectivity verification. Verify cybersecurity controls including: Firewall rule enforcement; Network segmentation; User authentication; Remote access; Logging and monitoring; Antivirus/EDR; Backup and recovery; Alarm/event generation; Security incident logging. Record test results and prepare test reports. Identify, troubleshoot and close cybersecurity punch points. 5. SIEM / Monitoring: Configure and validate collection of security logs from OT assets. Integrate firewalls, servers, switches and critical OT systems with SIEM/security monitoring platforms. Verify log forwarding, event generation, timestamps and alarm/event visibility. Support cybersecurity monitoring and incident investigation during commissioning. 6. Vulnerability & Compliance: Support OT vulnerability assessment and remediation activities. Review vulnerability scan results and coordinate remediation with OEMs/system vendors. Validate closure of cybersecurity observations and compliance gaps. Maintain cybersecurity compliance matrices and punch-list trackers. Support client audits, cybersecurity assessments and site inspections. Ensure all commissioning activities comply with applicable project cybersecurity requirements. 7. Documentation: Prepare/review Commissioning And Cybersecurity Documentation Including: Cybersecurity commissioning procedures; FAT/SAT procedures and reports; Firewall rule matrices; Network architecture diagrams; OT asset lists; IP address lists; Port/service matrices; User/access matrices; Hardening checklists; Vulnerability assessment reports; Cybersecurity compliance matrices; Punch-list closure reports; As-built cybersecurity documentation; Operation & maintenance documentation. 8. Coordination: Coordinate with Project Engineering, Commissioning, SCADA/EPMS, Telecom, Networking and Control System teams. Coordinate with OEMs and cybersecurity solution vendors. Interface with client/consultant cybersecurity and commissioning teams. Participate in daily coordination meetings and commissioning planning. Support troubleshooting and resolution of site cybersecurity issues. Provide technical inputs for project schedule and commissioning planning.