Principal OT Cybersecurity Infrastructure Engineer

A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting-edge of digital transformation and technology. From the multi-cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there’s something for everyone to get stuck into. And that’s where you come in.

Hitachi Rail is looking for an enthusiastic self-motivated Principal OT Cybersecurity Infrastructure Engineer who thrives in a fast-paced environment. The successful candidate is comfortable performing a wide range of tasks from administrative to strategic. The position is based in Sydney, Australia.

Designs, implements, integrates, and validates complete OT cybersecurity infrastructure for railway and other critical-infrastructure projects. The role combines ownership of security architecture with hands-on engineering, ensuring that platforms and controls meet project requirements, international standards, and applicable Australian regulatory obligations. Acting as the technical authority for security platforms, the role supports the full lifecycle from concept and detailed design through testing, commissioning, operational handover, and ongoing assurance.

• →Architecture and technical authority: Define end-to-end, vendor-agnostic OT cybersecurity architectures using zones and conduits, defence in depth, secure segmentation, high availability, and resilient design principles. Establish reusable technical standards, reference architectures, and integration patterns across projects and regions.
• →Platform design and implementation: Lead the design, configuration, integration, and validation of network and perimeter security, identity and access management, threat detection, SOC-enabling technologies, data protection, cyber recovery, and secure core IT/OT infrastructure.
• →Standards and assurance: Translate IEC 62443, CLC/TS 50701, NIST, and ISO requirements into practical controls. Maintain traceability from requirements and risk assessments through architecture, implementation, testing, and assurance evidence.
• →Testing and commissioning: Define and execute security FAT and SAT activities, hardening and configuration checks, functional control tests, and integration tests with OT subsystems. Support vulnerability reviews, remediation, Security Case inputs, and operational acceptance.
• →Technical coordination: Coordinate with OT, network, systems, SOC, vendor, and systems-integration teams. Plan technical work, manage dependencies and interfaces, identify delivery risks, and provide clear progress reporting.
• →Regulatory alignment and leadership: Adapt designs to Australian critical-infrastructure, cybersecurity, data-protection, and logging obligations while preserving reusable architectural principles. Mentor engineers and influence multidisciplinary design decisions.

• An engineering degree enabling full membership to Engineers Australia
• Bachelor’s degree in cybersecurity, computer science, information technology, telecommunications engineering, automation engineering, systems engineering, or an equivalent technical discipline.
• A master’s degree in cybersecurity, information assurance, or systems engineering is desirable.
• At least five years of professional experience in IT/OT cybersecurity infrastructure, including responsibility for architecture and deployment.
• Demonstrated delivery experience in railway, transportation, energy, utilities, oil and gas, or another critical-infrastructure environment.
• Hands-on experience designing, configuring, integrating, testing, and commissioning cybersecurity platforms and controls.
• Practical application of IEC 62443, including zones and conduits, defence in depth, security levels, and system and component requirements.
• Experience producing architecture, configuration, hardening, test, assurance, and operational handover documentation.

Rail and Australian Context

• Experience applying CLC/TS 50701 in railway projects.
• Ability to adapt cybersecurity architectures and controls to Australian regulatory, critical-infrastructure, data-protection, and logging obligations.
• Experience engaging with project assurance stakeholders, assessors, regulators, vendors, and systems integrators is desirable.

Desirable Certifications

• CISSP, CISM, or CRISC.
• GIAC GICSP, GRID, or GCIP.
• IEC 62443 cybersecurity certification.

At Hitachi Rail, we know that a diverse business is a sustainable business. Working collaboratively with a range of internal networks, we’re continuously improving our policies and products. From accessible, sustainable design to achieving a better gender balance. We base these efforts on our core values: Harmony, Sincerity, and Pioneering spirit. And by aligning with these, we’re able to create a workplace where people not only feel comfortable but are given opportunities to thrive. We’re especially keen to hear from women and people of all genders considering a career in engineering, cybersecurity, and rail technology.