Lead Network and Cybersecurity Engineer

Candidates who possess most of the experience outlined below and demonstrate strong motivation to develop expertise in the remaining areas are strongly encouraged to apply. We recognize the multifaceted nature of this role and value both proven experience and a genuine commitment to professional growth.

This is a technical engineering role, operating as a key contributor within the project team to ensure the successful execution of secure network and cybersecurity solutions. As an experienced practitioner for HVDC Control and Protection, you will contribute to the technical implementation of Network and Cybersecurity standards, drive quality in secure architectural design, and support the broader engineering team. Working across global projects involving multiple stakeholders, you will own the delivery of specific workstreams, from design and configuration to testing and commissioning of digital control and Substation Automation Systems. You will serve as a reliable technical resource, ensuring that project delivery meets our high standards of security, reliability, and quality.

Technical Implementation: Serve as a key contributor for Network and Cybersecurity domains. You will execute technical designs, validate design choices, and ensure alignment with global standards across project tasks.

Collaborative Delivery: Foster a culture of technical rigor. You will collaborate with peers and provide guidance to junior engineers, acting as a supportive team member in complex engineering environments.

Stakeholder Communication: Translate technical requirements into actionable project tasks. You will facilitate dialogue between internal teams and external suppliers, ensuring clear communication regarding technical progress and security requirements.

Risk and Quality Management: Proactively identify project-level technical risks and assist in driving resolutions. Implement improvements in engineering processes and maintain adherence to established Network and Cybersecurity best practices.

Decision Making: Operate with a high degree of independence on assigned work packages. You are empowered to make technical decisions within defined project parameters and escalate to senior leads when high-stakes challenges require additional expert input.

Design and Architecture: Execute the design of secure networks and communication architectures, adhering to IEC 62443-3-3 principles. Build and maintain functional infrastructure (Networking, virtualization, server OS configuration).

Compliance and Lifecycle: Ensure consistent adherence to Secure Deployment Guides and Security Assurance Plans. Execute vulnerability monitoring, patch management, and disaster recovery processes.

Technical Oversight: Implement IP address strategies, perform substation-level hardening, and evaluate Network and Cybersecurity solutions from 3rd party suppliers.

Tendering and Regulatory Support: Support bidding processes with knowledge of regulations such as EU NIS, NERC, and BDEW; assist in mapping requirements between varying Network and Cybersecurity standards.

Operational Execution: Perform design, configuration, and testing to meet project budgets and schedules. Assist in FAT (Factory Acceptance Testing) and execute on-site installation and commissioning of LAN networks.

Documentation: Ensure all technical documentation aligns with engineering policies and procedures, including appropriate confidentiality levels.

Technical Foundation: Demonstrated expertise in Industrial Networking, Systems Architecture, or Cybersecurity. Relevant technical knowledge gained through a degree in a related field OR equivalent industry-recognized certifications (e.g., GICSP, ISA/IEC 62443, CCNA/CCNP).

Domain Expertise: Experience in industrial control and protection system design, specifically within Distributed Control Systems and Substation Automation (IEC 61850 environments).

Cybersecurity Standards: Applied knowledge of IEC 62443 standards (parts 4-1, 4-2, 3-3, 2-4) and hands-on experience with firewalls (Fortinet), IDS (Nozomi, Radiflow), VPN/PKI, and endpoint security.

Networking: Strong knowledge of Layer 2 and 3 protocols (IPv4, OSPF, VRRP, LACP, SNMP, SSH, SFTP). Ability to build functional infrastructure.

Systems and Infrastructure: Experience with virtualization (VMware, HyperV, Proxmox) and Windows Server configuration.

Industrial Protocols: Proficient in IEC 101/104, PTP, OPC UA, DNP3, Modbus TCP/IP and diagnostic debugging using Wireshark.

Product Familiarity: Experience with GE Reason, Westermo, or Meinberg products is advantageous.