Lead Network and Cybersecurity Engineer

Design and Architecture: Execute the design of secure networks and communication architectures, adhering to IEC 62443-3-3 principles. Build and maintain functional infrastructure (Networking, virtualization, server OS configuration).

Compliance and Lifecycle: Ensure consistent adherence to Secure Deployment Guides and Security Assurance Plans. Execute vulnerability monitoring, patch management, and disaster recovery processes.

Technical Oversight: Implement IP address strategies, perform substation-level hardening, and evaluate Network and Cybersecurity solutions from 3rd party suppliers.

Tendering and Regulatory Support: Support bidding processes with knowledge of regulations such as EU NIS, NERC, and BDEW; assist in mapping requirements between varying Network and Cybersecurity standards.

Operational Execution: Perform design, configuration, and testing to meet project budgets and schedules. Assist in FAT (Factory Acceptance Testing) and execute on-site installation and commissioning of LAN networks.

Documentation: Ensure all technical documentation aligns with engineering policies and procedures, including appropriate confidentiality levels.

Technical Foundation: Demonstrated expertise in Industrial Networking, Systems Architecture, or Cybersecurity. Relevant technical knowledge gained through a degree in a related field OR equivalent industry-recognized certifications (e.g., GICSP, ISA/IEC 62443, CCNA/CCNP).

Domain Expertise: Experience in industrial control and protection system design, specifically within Distributed Control Systems and Substation Automation (IEC 61850 environments).

Cybersecurity Standards: Applied knowledge of IEC 62443 standards (parts 4-1, 4-2, 3-3, 2-4) and hands-on experience with firewalls (Fortinet), IDS (Nozomi, Radiflow), VPN/PKI, and endpoint security.

Networking: Strong knowledge of Layer 2 and 3 protocols (IPv4, OSPF, VRRP, LACP, SNMP, SSH, SFTP). Ability to build functional infrastructure.

Systems and Infrastructure: Experience with virtualization (VMware, HyperV, Proxmox) and Windows Server configuration.

Industrial Protocols: Proficient in IEC 101/104, PTP, OPC UA, DNP3, Modbus TCP/IP and diagnostic debugging using Wireshark.

Product Familiarity: Experience with GE Reason, Westermo, or Meinberg products is advantageous.

Technical Implementation: Serve as a key contributor for Network and Cybersecurity domains. You will execute technical designs, validate design choices, and ensure alignment with global standards across project tasks.

Collaborative Delivery: Foster a culture of technical rigor. You will collaborate with peers and provide guidance to junior engineers, acting as a supportive team member in complex engineering environments.

Stakeholder Communication: Translate technical requirements into actionable project tasks. You will facilitate dialogue between internal teams and external suppliers, ensuring clear communication regarding technical progress and security requirements.

Risk and Quality Management: Proactively identify project-level technical risks and assist in driving resolutions. Implement improvements in engineering processes and maintain adherence to established Network and Cybersecurity best practices.

Decision Making: Operate with a high degree of independence on assigned work packages. You are empowered to make technical decisions within defined project parameters and escalate to senior leads when high-stakes challenges require additional expert input.