{bc}
Apply
workday

Engineer III, OT/ICS Cybersecurity & Controls

Nextracker
Remote, USA
Mid
Hybrid
Discovered 2 weeks ago
azurecoupalinuxpowershellpythonsap

Full Job Posting

Skills

  • Hands-on proficiency configuring, troubleshooting, and hardening Layer 2/3 managed network switches and firewalls (policies, routing, VLAN tagging, fiber network technology).
  • Proficient administering the Ignition SCADA/HMI platform, including scripting and security configuration.
  • Proficient with SIEM tooling (e.g., Splunk, Microsoft Sentinel, or similar) for building detections, dashboards, and alerting.
  • Proficient with Microsoft Azure networking and security services; working knowledge of Azure AD/Entra ID administration.
  • Proficient supporting cybersecurity compliance activities, including documentation, evidence gathering, and audit support for frameworks such as IEC 62443 and NERC CIP.
  • Proficient with Modbus and/or OPC-UA industrial protocols.
  • Basic / Foundational experience with Python or PowerShell scripting for automation and log analysis.
  • Basic / Foundational experience with vulnerability scanning and assessment tooling.
  • Proficient in MS Office, Windows RDP, and remote administration tools.
  • Working knowledge of Linux OS, including command-line administration, service/log management, and basic hardening practices is a plus.
  • Abilities
  • Able to define problems, collect data, establish facts, and draw valid conclusions. Able to interpret an extensive variety of technical instructions and read/understand network, control, and electrical drawings.
  • Communicate effectively with staff and management at all levels, including translating technical cybersecurity risk into business terms.
  • Always maintain the highest degree of honesty and integrity.
  • Lead proactive efforts to achieve departmental and company cybersecurity and compliance goals.
  • Ability to work under pressure and adapt to changing requirements with a positive attitude.
  • Protect confidential information by not communicating, disclosing to, or using it for the benefit of 3rd parties. Protection of the CMS/SCADA platform and its cybersecurity posture is of utmost importance.
  • Comply with all EHS policies, practices, and procedures, reporting all unsafe activities to Management and/or Human Resources.
  • Work in a global environment to maintain standards and latest cybersecurity practices.
  • Ability to work closely with and influence cross-functional teams (Controls, Software, IT, and Operations).
  • Self-directed project management skills to lead security initiatives to completion.
  • Highly competitive, self-starter that can work both individually and in a group setting.
  • Ability to work flexible hours and be independent in the field during commissioning support.
  • Education & Experience
  • Bachelor's degree in cybersecurity, computer engineering, electrical engineering, computer science, or a related field, with a minimum of five (5) years of related experience in OT/ICS or IT network security.
  • Demonstrated familiarity with and hands-on experience supporting NERC CIP compliance requirements (e.g., asset identification/categorization, electronic and physical security perimeters, access control, and audit evidence/documentation) is required.
  • Hands-on experience configuring and troubleshooting managed network switches and firewalls in a production or industrial environment is required.
  • Experience administering or supporting a SCADA/HMI platform (Ignition preferred) is required.
  • Experience with SIEM deployment, tuning, or monitoring is required.
  • Experience with Microsoft Azure networking, security, and identity services is preferred.
  • Familiarity with IEC 62443 industrial cybersecurity standards is required.
  • Experience supporting cybersecurity compliance programs more broadly (NIST 800-82) is preferred.
  • Relevant certifications a plus: CISSP, GICSP, CCNA/CCNP Security, CompTIA Security+, Microsoft Certified: Azure Security Engineer Associate, or Certified SCADA Security Architect.
  • Experience with inverter-based technology projects, especially involving Battery Energy Storage Systems or PV, is considered an asset.
  • Experience reading and understanding project drawings, network diagrams, and technical documentation.
  • s (e.g., SAP, Oracle) and E Procurement tools (e.g., Coupa, Ariba).
  • Physical Requirements & Work Environment
  • The physical demands and work environment characteristics described herein are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
  • Ability to travel up to 20% of the time, including occasional international travel, to support commissioning and network/cybersecurity configuration of BESS sites.
  • Regularly required to sit and use a computer for extended periods; occasionally required to stand, walk, and move equipment in switchgear/network rooms.
  • Occasionally lift and/or move up to 25 pounds (networking hardware, laptops, test equipment).
  • The noise level in the work environment is usually low to moderate in office settings, and moderate to loud during site visits.
  • Our Lake Mary, FL office is conveniently located near Orlando International Airport (MCO), with a modern floor plan including a Diagnostics Operations Center (DOC) and SCADA provisioning room embedded in the design. This role would be either Remote or Hybrid (2-3 days a week) in the office, depending on the situation.
  • Work Environment Conditions
  • Work is performed in a climate-controlled office environment with standard lighting and noise levels. During occasional site visits, the employee may be exposed to outdoor weather conditions, industrial noise levels requiring hearing protection, and energized electrical equipment requiring appropriate PPE. Site visits may require hands-on network/cybersecurity configuration, installation, or troubleshooting work.
  • PPE Requirements (if applicable)
  • Standard office attire applies for daily work. When visiting operational sites, the employee must wear employer-provided PPE including: hard hat, safety glasses, steel-toed footwear, high-visibility vest, and hearing protection as posted. Arc flash rated PPE is not required as this position does not perform energized electrical work.
  • Travel Requirements (if applicable)
  • Travel up to 20% of the time, including occasional international travel, to support network and cybersecurity configuration during BESS commissioning.
  • At Nextpower, we are driving the global energy transition with an integrated clean energy technology platform that combines intelligent structural, electrical, and digital solutions for utility-scale power plants. Our comprehensive portfolio enables faster project delivery, higher performance, and greater reliability, helping our customers capture the full value of solar power. Our talented worldwide teams are redefining how solar power plants are designed, built, and operated every day with smart technology, data-driven insights, and advanced automation. Together, we’re building the foundation for the world’s next generation of clean energy infrastructure.
  • Nextpower is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

Qualifications

  • Hands-on proficiency configuring, troubleshooting, and hardening Layer 2/3 managed network switches and firewalls (policies, routing, VLAN tagging, fiber network technology).
  • Proficient administering the Ignition SCADA/HMI platform, including scripting and security configuration.
  • Proficient with SIEM tooling (e.g., Splunk, Microsoft Sentinel, or similar) for building detections, dashboards, and alerting.
  • Proficient with Microsoft Azure networking and security services; working knowledge of Azure AD/Entra ID administration.
  • Proficient supporting cybersecurity compliance activities, including documentation, evidence gathering, and audit support for frameworks such as IEC 62443 and NERC CIP.
  • Proficient with Modbus and/or OPC-UA industrial protocols.
  • Basic / Foundational experience with Python or PowerShell scripting for automation and log analysis.
  • Basic / Foundational experience with vulnerability scanning and assessment tooling.
  • Proficient in MS Office, Windows RDP, and remote administration tools.
  • Abilities
  • Able to define problems, collect data, establish facts, and draw valid conclusions. Able to interpret an extensive variety of technical instructions and read/understand network, control, and electrical drawings.
  • Communicate effectively with staff and management at all levels, including translating technical cybersecurity risk into business terms.
  • Always maintain the highest degree of honesty and integrity.
  • Lead proactive efforts to achieve departmental and company cybersecurity and compliance goals.
  • Ability to work under pressure and adapt to changing requirements with a positive attitude.
  • Protect confidential information by not communicating, disclosing to, or using it for the benefit of 3rd parties. Protection of the CMS/SCADA platform and its cybersecurity posture is of utmost importance.
  • Comply with all EHS policies, practices, and procedures, reporting all unsafe activities to Management and/or Human Resources.
  • Work in a global environment to maintain standards and latest cybersecurity practices.
  • Ability to work closely with and influence cross-functional teams (Controls, Software, IT, and Operations).
  • Self-directed project management skills to lead security initiatives to completion.
  • Highly competitive, self-starter that can work both individually and in a group setting.
  • Ability to work flexible hours and be independent in the field during commissioning support.
  • Bachelor's degree in cybersecurity, computer engineering, electrical engineering, computer science, or a related field, with a minimum of five (5) years of related experience in OT/ICS or IT network security.
  • Demonstrated familiarity with and hands-on experience supporting NERC CIP compliance requirements (e.g., asset identification/categorization, electronic and physical security perimeters, access control, and audit evidence/documentation) is required.
  • Hands-on experience configuring and troubleshooting managed network switches and firewalls in a production or industrial environment is required.
  • Experience with SIEM deployment, tuning, or monitoring is required.
  • Familiarity with IEC 62443 industrial cybersecurity standards is required.
  • Experience with inverter-based technology projects, especially involving Battery Energy Storage Systems or PV, is considered an asset.
  • Experience reading and understanding project drawings, network diagrams, and technical documentation.
  • s (e.g., SAP, Oracle) and E Procurement tools (e.g., Coupa, Ariba).
  • Physical Requirements & Work Environment
  • The physical demands and work environment characteristics described herein are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
  • Ability to travel up to 20% of the time, including occasional international travel, to support commissioning and network/cybersecurity configuration of BESS sites.
  • Regularly required to sit and use a computer for extended periods; occasionally required to stand, walk, and move equipment in switchgear/network rooms.
  • Occasionally lift and/or move up to 25 pounds (networking hardware, laptops, test equipment).
  • The noise level in the work environment is usually low to moderate in office settings, and moderate to loud during site visits.
  • Our Lake Mary, FL office is conveniently located near Orlando International Airport (MCO), with a modern floor plan including a Diagnostics Operations Center (DOC) and SCADA provisioning room embedded in the design. This role would be either Remote or Hybrid (2-3 days a week) in the office, depending on the situation.
  • Work Environment Conditions
  • Work is performed in a climate-controlled office environment with standard lighting and noise levels. During occasional site visits, the employee may be exposed to outdoor weather conditions, industrial noise levels requiring hearing protection, and energized electrical equipment requiring appropriate PPE. Site visits may require hands-on network/cybersecurity configuration, installation, or troubleshooting work.
  • PPE Requirements (if applicable)
  • Standard office attire applies for daily work. When visiting operational sites, the employee must wear employer-provided PPE including: hard hat, safety glasses, steel-toed footwear, high-visibility vest, and hearing protection as posted. Arc flash rated PPE is not required as this position does not perform energized electrical work.
  • Travel Requirements (if applicable)
  • Travel up to 20% of the time, including occasional international travel, to support network and cybersecurity configuration during BESS commissioning.
  • At Nextpower, we are driving the global energy transition with an integrated clean energy technology platform that combines intelligent structural, electrical, and digital solutions for utility-scale power plants. Our comprehensive portfolio enables faster project delivery, higher performance, and greater reliability, helping our customers capture the full value of solar power. Our talented worldwide teams are redefining how solar power plants are designed, built, and operated every day with smart technology, data-driven insights, and advanced automation. Together, we’re building the foundation for the world’s next generation of clean energy infrastructure.
  • Nextpower is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
  • We are Nextpower

Preferred Qualifications

  • Working knowledge of Linux OS, including command-line administration, service/log management, and basic hardening practices is a plus.
  • Experience administering or supporting a SCADA/HMI platform (Ignition preferred) is required.
  • Experience with Microsoft Azure networking, security, and identity services is preferred.
  • Experience supporting cybersecurity compliance programs more broadly (NIST 800-82) is preferred.
  • Relevant certifications a plus: CISSP, GICSP, CCNA/CCNP Security, CompTIA Security+, Microsoft Certified: Azure Security Engineer Associate, or Certified SCADA Security Architect.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Nextracker

Sales Analyst, Power Conversion

Mesa, USA

Discovered 2 days agoFull-time

Sales Director, Power Conversion

Mesa, USA

Discovered 2 days agoFull-time

HR Director - Innovation Team

, USA

Discovered 2 days agoFull-time

Manager - Internal Control

, USA

Discovered 2 days agoFull-time

Incorta Architect

Hyderabad, IND

Discovered 2 days agoFull-time

Corporate Development Operations Manager

, USA

Discovered 3 days ago

Assistant Manager, Accounts Payable - EMEA

Chennai, IND

Discovered 3 days agoFull-time

Sales Analyst – Robotics

, USA

Discovered 4 days ago