Lead Engineer - OT Cybersecurity

Overview

Key Responsibilities

• Design and develop High-Level Design (HLD) and Low-Level Design (LLD) documents for OT cybersecurity infrastructure.
• Perform OT Cybersecurity Gap assessment , risk assessments as per IEC 62443 , NIST and international standards .
• Perform cable routing and physical installation of network and security devices in substations and control centers.
• Deploy, configure, and integrate cybersecurity solutions including Nozomi Networks, Forescout, and Fortinet firewalls.
• Implement and manage Acronis backup solutions for critical OT systems.
• Design and implement a centralized DMZ architecture for secure data exchange between IT and OT networks.
• Review and validate electrical panel drawings and overall electrical design setups for compliance and integration.
• Conduct Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT) for all deployed systems.
• Prepare detailed technical reports, test plans, and documentation throughout the project lifecycle.
• Perform commissioning activities including system validation and operational readiness checks.
• Configure KVM switches for remote access and control of OT systems.
• Install and configure VMware ESXi on physical servers.
• Set up and segment virtual machines (VMs) according to network security policies.
• Create and maintain network architecture drawings using Microsoft Visio.
• Assign zones and conduits in accordance with ISA/IEC 62443 standards.
• Identify and document cable routes for all network and power connections.
• Ensure proper labeling and documentation of all installed components.
• Work with HMIs and gateways on Siemens, ABB, and Schneider Electric systems.
• Integrate and configure SICAM SCMS systems and other substation automation platforms.
• Apply instrumentation knowledge to configure and troubleshoot sensors, actuators, and control systems in substations.
• Collaborate with cross-functional teams including network engineers, cybersecurity analysts, and utility operations staff.
• Ensure compliance with industry standards and cybersecurity best practices

Engineering Design (Hld And Lld) & Drawing Development

• Review and validate Single Line Diagrams (SLDs), existing as-built drawings, and brownfield constraints; raise RFIs and propose constructible solutions.
• Validate panel drawings (GA, internal layout, wiring, interconnection, termination schedules, BOM) and ensure “as-built” updates post commissioning.

• OT Cybersecurity Infrastructure Deployment & Integration

• Implement and integrate OT cyber infrastructure components (e.g., industrial firewalls, switches, IDS sensors, secure remote access, logging collectors) according to approved LLD and standards.
• Support network cutovers, IP schemes, VLAN/VRF mapping, routing design inputs, and secure connectivity between substations and central platforms.
• Ensure installations meet required security baselines and customer utility practices (documentation, labeling, ports, hardening inputs).

Testing, FAT And SAT, Commissioning & Acceptance

• Support/lead FAT preparation and execution: test procedures, inspection checklists, configuration verification, and evidence packs.
• Execute SAT / site commissioning, including pre-checks, power-up, connectivity validation, link testing, redundancy checks, punch lists/snags, and final handover.
• Coordinate with OEMs and customer operations for outage windows, access approvals, and acceptance criteria signoffs.

HSE Documentation, Governance & OSHAD Compliance

• Prepare and maintain site HSE deliverables: Method Statements, Risk Assessments, Job Safety Analyses (JSA), lifting plans (if needed), toolbox talk records, and daily site safety documentation.
• Ensure compliance with Permit-to-Work systems, site inductions, emergency procedures, incident/near-miss reporting and stop-work authority as required
• Support OSHAD-aligned compliance expectations such as maintaining training records and competency evidence where required by the client/authority.

Data Center And Central Cyber Infrastructure Exposure

• Support design and execution for central environments (SOC / control center / data center) including rack placement, structured cabling, patching, secure network build, and platform connectivity.
• Coordinate the infrastructure needs for central management/monitoring components and ensure readiness for integration testing and operations handover. (Comparable rack/device installation and safety controls are seen in data-center hub method statements.

• Project Delivery Support (Planning, Coordination, Reporting)

• Contribute to project planning: WBS inputs, site readiness checklists, resource plan, dependencies, and daily/weekly progress reporting.
• Support BOQ take-offs for panels/cabling/infrastructure and ensure materials readiness aligned with execution schedule.
• Coordinate with subcontractors for electrical/cabling works and ensure quality, safety, and documentation compliance

Skills And Certifications

Technical Skills And Core Competencies

• Demonstrated on-site execution in brownfield substations / utility environments (HV/LV interfaces awareness, safe work in operational sites).
• Strong capability in panel/cabinet build supervision, cabling, termination practices, labeling, testing, and as-built documentation.
• Proven ability to prepare HLD/LLD, implementable drawings, and engineering documentation packs.
• Understanding of OT network architecture principles (segmentation, zones/conducts), and integration constraints in utilities.
• Experience supporting FAT/SAT and commissioning activities with structured evidence and acceptance documentation.
• HSE / Compliance (Mandatory or Highly Preferred)
• Strong working knowledge of PTW systems, method statements and risk assessments for live utility sites
• Familiarity with UAE utility HSE expectations including OSHAD-aligned requirements and client safety governance.
• Utility Competency Certificate (e.g., Transco Competent Person or equivalent) OR demonstrable eligibility to obtain (substation experience, PTW exposure, toolbox talks, etc.).
• NEBOSH IGC (or equivalent) and OSHAD registration card
• First Aid / Fire Fighting certificates (as commonly requested for utility site roles).
• Strong ownership mindset, coordination with multiple stakeholders (client/OEM/subcontractors), and ability to execute under schedule constraints.
• High attention to detail in drawings, cabling schedules, labeling, and evidence packs.
• Clear communication and disciplined reporting for site progress, risks, and dependencies

Minimum Work Experience

• 7–12 years in cyber infrastructure / OT infrastructure / electrical-telecom execution in utilities, substations, rail, or industrial environments.
• Proven track record delivering brownfield site implementation including cabling/panels and commissioning support.
• Experience in data center infrastructure (rack/cabling/network build) supporting cyber platforms is a strong advantage.

Education

• Bachelor’s degree in electrical engineering / Electronics / Instrumentation / Telecom / Computer Engineering (or equivalent relevant discipline)..
• Relevant OT cybersecurity certifications (at least one):
• + ISA 62443 , GICSP ,CISSP