OT Cyber Security Engineer - Commissioning

• Riyadh

• Required Experience3 - 5 years

Cyber Security SIEM - Security Information Event Management Firewall and intrusion detection/prevention protocols

We are looking for experienced OT Cyber Security Engineers to support the commissioning, testing, integration, and handover of Operational Technology (OT) Cyber Security systems for power and energy projects.

The role will involve hands-on site activities related to OT network security, industrial firewalls, network segmentation, secure remote access, SIEM/logging, endpoint security, security monitoring, hardening, vulnerability remediation, and cybersecurity compliance.

The candidate will work closely with SCADA, EMS/EPMS, PPC, RTU, PLC, protection, telecom, networking, and IT teams, as well as OEMs, clients, and EPC stakeholders, to ensure successful commissioning and compliance with project cybersecurity requirements.

• Execute commissioning and site acceptance activities for OT Cyber Security systems.
• Configure, test, troubleshoot, and validate OT security infrastructure at project sites.
• Perform installation and commissioning of:

• Industrial firewalls

• OT switches and network security devices

• Network segmentation / DMZ infrastructure

• Secure remote access solutions

• SIEM / security monitoring systems

• Antivirus / EDR solutions

• Jump servers / bastion hosts

• Patch management solutions

• OT asset monitoring systems

• Verify cybersecurity architecture against approved project design and engineering documents.
• Perform functional testing and SAT activities for OT Cyber Security systems.

• Configure and troubleshoot industrial firewalls and security appliances.
• Implement and verify firewall rules, NAT, routing, VPN and access-control policies.
• Verify network segmentation between:

• IT and OT networks

• Control network and process network

• OT DMZ

• Engineering stations

• SCADA/EMS/EPMS systems

• Remote access zones

• Perform firewall rule validation and connectivity troubleshooting.
• Review network traffic and identify unauthorized or unexpected communication.

• Perform hardening of OT servers, workstations, engineering stations and network devices.
• Implement security baselines in accordance with approved project requirements.
• Support:

• Windows hardening

• Account and password policies

• USB/device control

• Application whitelisting

• Security patches

• Antivirus/EDR configuration

• Disablement of unnecessary services and ports

• Secure protocols and communication

• Verify compliance with approved cybersecurity checklists and standards.

• Prepare and execute OT Cyber Security test procedures.
• Conduct FAT/SAT, functional testing and integrated system testing.
• Perform point-to-point and end-to-end connectivity verification.
• Verify cybersecurity controls including:

• Firewall rule enforcement

• Network segmentation

• User authentication

• Remote access

• Logging and monitoring

• Antivirus/EDR

• Backup and recovery

• Alarm/event generation

• Security incident logging

• Record test results and prepare test reports.
• Identify, troubleshoot and close cybersecurity punch points.

• Configure and validate collection of security logs from OT assets.
• Integrate firewalls, servers, switches and critical OT systems with SIEM/security monitoring platforms.
• Verify log forwarding, event generation, timestamps and alarm/event visibility.
• Support cybersecurity monitoring and incident investigation during commissioning.

• Support OT vulnerability assessment and remediation activities.
• Review vulnerability scan results and coordinate remediation with OEMs/system vendors.
• Validate closure of cybersecurity observations and compliance gaps.
• Maintain cybersecurity compliance matrices and punch-list trackers.
• Support client audits, cybersecurity assessments and site inspections.
• Ensure all commissioning activities comply with applicable project cybersecurity requirements.

Prepare/review commissioning and cybersecurity documentation including:

• Cybersecurity commissioning procedures
• FAT/SAT procedures and reports
• Firewall rule matrices
• Network architecture diagrams
• OT asset lists
• IP address lists
• Port/service matrices
• User/access matrices
• Hardening checklists
• Vulnerability assessment reports
• Cybersecurity compliance matrices
• Punch-list closure reports
• As-built cybersecurity documentation
• Operation & maintenance documentation

• Coordinate with Project Engineering, Commissioning, SCADA/EPMS, Telecom, Networking and Control System teams.
• Coordinate with OEMs and cybersecurity solution vendors.
• Interface with client/consultant cybersecurity and commissioning teams.
• Participate in daily coordination meetings and commissioning planning.
• Support troubleshooting and resolution of site cybersecurity issues.
• Provide technical inputs for project schedule and commissioning planning.

The candidate should have hands-on knowledge of:

• SCADA/EMS/EPMS environments
• Industrial Ethernet and TCP/IP networking
• VLANs and network segmentation
• Firewalls and access-control policies
• DMZ architecture
• VPN and secure remote access
• Windows Server / Windows client security
• Active Directory and Group Policy
• SIEM and security logging

• Vulnerability assessment
• Patch management
• Network troubleshooting
• Packet capture and traffic analysis
• Cybersecurity hardening
• Incident detection and troubleshooting

Experience with one or more of the following is preferred:

• SCADA
• EMS/DMS
• EPMS
• RTU
• PLC
• Protection systems
• Substation automation
• Power plant control systems
• Renewable energy control systems
• PPC
• BESS
• Industrial communication protocols such as:

• IEC 61850

• IEC 60870-5-104

• Modbus TCP/IP

• DNP3

• OPC/OPC UA

Knowledge of applicable OT cybersecurity standards and frameworks, preferably:

• IEC 62443
• IEC 62351
• ISO 27001

• Saudi Aramco / client-specific OT cybersecurity requirements, where applicable
• Project-specific cybersecurity standards and specifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Electrical Engineering, Electronics & Communication Engineering, or a related discipline.
• Typically 3-5 Year of experience in OT/ICS Cyber Security, preferably with significant site commissioning experience.
• Candidates with strong hands-on commissioning experience in power/energy projects will be preferred.

Certification – Preferred

One or more of the following certifications will be advantageous:

• IEC 62443 Cybersecurity certification
• GICSP
• CISSP
• CEH
• Security+

• Fortinet / Palo Alto / Check Point certifications
• Vendor-specific OT Cybersecurity certifications

Preference will be given to candidates having experience in:

• Power transmission/distribution projects
• Renewable energy projects
• Solar PV plants
• BESS projects
• Substations
• Grid control centers
• SCADA/EMS/EPMS projects
• Large-scale EPC projects
• Client/consultant SAT and commissioning
• OT Cyber Security implementation and commissioning

• Strong troubleshooting and analytical skills.
• Ability to work independently at project sites.
• Strong coordination and communication skills.
• Ability to work under commissioning schedule pressure.
• Good documentation and reporting skills.
• Ability to interface professionally with clients, consultants and OEMs.
• Willingness to work extended hours during critical commissioning activities.
• Strong ownership of assigned cybersecurity activities.

The engineer will be expected to:

• Complete OT cybersecurity commissioning activities as per project schedule.
• Achieve successful FAT/SAT and integrated testing.
• Minimize cybersecurity-related commissioning punch points.
• Expedite closure of client/consultant observations.
• Ensure cybersecurity compliance before system handover.
• Support successful project commissioning and energization milestones.

The ideal candidate is a hands-on OT Cyber Security commissioning professional who understands both cybersecurity and industrial control systems—not purely an IT cybersecurity engineer.

Candidates with practical experience in firewall configuration, OT DMZ, network segmentation, SCADA/EPMS environments, SIEM, hardening, vulnerability remediation, SAT and client-facing commissioning will be strongly preferred.