OT Cyber Security Engineer - Commissioning

We are looking for experienced OT Cyber Security Engineers to support the commissioning, testing, integration, and handover of Operational Technology (OT) Cyber Security systems for power and energy projects. The role will involve hands-on site activities related to OT network security, industrial firewalls, network segmentation, secure remote access, SIEM/logging, endpoint security, security monitoring, hardening, vulnerability remediation, and cybersecurity compliance. The candidate will work closely with SCADA, EMS/EPMS, PPC, RTU, PLC, protection, telecom, networking, and IT teams, as well as OEMs, clients, and EPC stakeholders, to ensure successful commissioning and compliance with project cybersecurity requirements. Key Responsibilities 1. OT Cyber Security Commissioning Execute commissioning and site acceptance activities for OT Cyber Security systems. Configure, test, troubleshoot, and validate OT security infrastructure at project sites. Perform installation and commissioning of: Industrial firewalls OT switches and network security devices Network segmentation / DMZ infrastructure Secure remote access solutions SIEM / security monitoring systems Antivirus / EDR solutions Jump servers / bastion hosts Patch management solutions OT asset monitoring systems Verify cybersecurity architecture against approved project design and engineering documents. Perform functional testing and SAT activities for OT Cyber Security systems. 2. OT Network & Firewall Configure and troubleshoot industrial firewalls and security appliances. Implement and verify firewall rules, NAT, routing, VPN and access-control policies. Verify network segmentation between: IT and OT networks Control network and process network OT DMZ Engineering stations SCADA/EMS/EPMS systems Remote access zones Perform firewall rule validation and connectivity troubleshooting. Review network traffic and identify unauthorized or unexpected communication. 3. Cybersecurity Hardening Perform hardening of OT servers, workstations, engineering stations and network devices. Implement security baselines in accordance with approved project requirements. Support: Windows hardening Account and password policies USB/device control Application whitelisting Security patches Antivirus/EDR configuration Disablement of unnecessary services and ports Secure protocols and communication Verify compliance with approved cybersecurity checklists and standards. 4. Testing & SAT Prepare and execute OT Cyber Security test procedures. Conduct FAT/SAT, functional testing and integrated system testing. Perform point-to-point and end-to-end connectivity verification. Verify cybersecurity controls including: Firewall rule enforcement Network segmentation User authentication Remote access Logging and monitoring Antivirus/EDR Backup and recovery Alarm/event generation Security incident logging Record test results and prepare test reports. Identify, troubleshoot and close cybersecurity punch points. 5. SIEM / Monitoring Configure and validate collection of security logs from OT assets. Integrate firewalls, servers, switches and critical OT systems with SIEM/security monitoring platforms. Verify log forwarding, event generation, timestamps and alarm/event visibility. Support cybersecurity monitoring and incident investigation during commissioning. 6. Vulnerability & Compliance Support OT vulnerability assessment and remediation activities. Review vulnerability scan results and coordinate remediation with OEMs/system vendors. Validate closure of cybersecurity observations and compliance gaps. Maintain cybersecurity compliance matrices and punch-list trackers. Support client audits, cybersecurity assessments and site inspections. Ensure all commissioning activities comply with applicable project cybersecurity requirements. 7. Documentation Prepare/review commissioning and cybersecurity documentation including: Cybersecurity commissioning procedures FAT/SAT procedures and reports Firewall rule matrices Network architecture diagrams OT asset lists IP address lists Port/service matrices User/access matrices Hardening checklists Vulnerability assessment reports Cybersecurity compliance matrices Punch-list closure reports As-built cybersecurity documentation Operation & maintenance documentation 8. Coordination Coordinate with Project Engineering, Commissioning, SCADA/EPMS, Telecom, Networking and Control System teams. Coordinate with OEMs and cybersecurity solution vendors. Interface with client/consultant cybersecurity and commissioning teams. Participate in daily coordination meetings and commissioning planning. Support troubleshooting and resolution of site cybersecurity issues. Provide technical inputs for project schedule and commissioning planning. Required Technical Skills The candidate should have hands-on knowledge of: OT/ICS Cyber Security SCADA/EMS/EPMS environments Industrial Ethernet and TCP/IP networking VLANs and network segmentation Firewalls and access-control policies DMZ architecture VPN and secure remote access Windows Server / Windows client security Active Directory and Group Policy SIEM and security logging Antivirus / EDR Vulnerability assessment Patch management Network troubleshooting Packet capture and traffic analysis Cybersecurity hardening Incident detection and troubleshooting Preferred OT / Industrial Knowledge

Desired Candidate Profile

The ideal candidate is a hands-on OT Cyber Security commissioning professional who understands both cybersecurity and industrial control systems not purely an IT cybersecurity engineer. Candidates with practical experience in firewall configuration, OT DMZ, network segmentation, SCADA/EPMS environments, SIEM, hardening, vulnerability remediation, SAT and client-facing commissioning will be strongly preferred.