Lead Network & Cyber Security Engineer

Role overview

Architecture and risk

• Understand customer specifications and standards such as CIS benchmarks and IEC 62443, and prepare compliance lists for required deviations.
• Lead secure OT network architecture and implementation, ensuring segmentation between IT and OT networks and appropriate DCS separation.
• Prepare system and logical architecture, bills of material, functional and detailed design specifications, factory and site acceptance test procedures, and integration or modification method statements.
• Conduct and oversee OT risk assessments to identify vulnerabilities and threats.

Security and stakeholder collaboration

• Work with customer OT cybersecurity teams and stakeholders to align practices and understand requirements.
• Review third-party vendors for compliance and recommend security enhancements and purchases.
• Train OT engineers and customer personnel on security best practices and cyber-threat awareness.
• Conduct OT security audits and assessments and ensure compliance with applicable standards, including IEC 62443 and NERC CIP.
• Collaborate with OEMs on solutions and hardware selection based on customer requirements and cost-effectiveness.
• Work with DCS teams to address vulnerabilities, securely integrate components, and obtain security patches.

Network and systems competencies

• Configure and harden L2/L3 switches; troubleshoot security solutions; work with ACLs, network layers, routing, and component placement.
• Implement DCS access controls, including authentication, role-based access, and secure remote access.
• Use WSUS and automatic patching to deploy vendor software and firmware updates with minimal disruption.
• Configure What's Up Gold NMS, including installation through commissioning, architecture diagrams, and dashboards.
• Manage antivirus, whitelisting, desktop hardening, integrity and change controls, application control, and data-loss prevention.
• Design high-availability VM clusters and VM architecture using VMware vSphere or Hyper-V.
• Design backup and recovery systems and policies for ICSS data integrity and availability; product knowledge includes Veritas NetBackup, Acronis, and Veeam Backup & Replication.

Experience and qualifications

• Requires 10 to 15+ years of IT/OT network configuration and cybersecurity implementation experience.
• Requires previous experience leading network and system security engineers and verbal and written communication skills.
• Cisco, Nozomi, Palo Alto, and VMware product certifications are an advantage; IC32 and IEC 62443 certification is preferred.

About Yokogawa