OT Network Security Engineer

A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting-edge of digital transformation and technology. From the multi-cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there’s something for everyone to get stuck into. And that’s where you come in.

Hitachi Rail is looking for an enthusiastic self-motivated OT Network Security Engineer who thrives in a fast-paced environment. The successful candidate is comfortable performing a wide range of tasks from administrative to strategic. This is a fulltime permanent position based in Brisbane, Australia.

In this role you will design, implement, integrate, optimise and validate network security and firewall infrastructure for railway and critical-infrastructure projects. The role combines security architecture ownership with hands-on engineering and implementation responsibility, ensuring that cybersecurity platforms and controls are deployed according to international standards, project requirements, and local regulatory frameworks.

You will act as the technical go-to point for anything related to network security and firewalls, supporting the full lifecycle from design through commissioning and operational handover.

• Design end-to-end OT network security architecture.
• Define technical standards, reference architectures, and design patterns for network security platforms.
• Design & Implementation of Network Security Platforms

Design, deployment, configuration, and validation of Juniper Firewalls including the following network security components:

• Network and perimeter security
• Network access and identity
• Threat detection and endpoint security
• Network Intrusion Detection/Prevention Systems
• Standards Compliance & Security Assurance

Produce and review security architecture documents, design justifications, configuration standards, and hardening guides.

Define and execute security FAT/SAT, configuration and hardening validation, functional tests for security controls, and integration testing with OT subsystems.

• Managing changes through CCR and CCB
• Serve as the primary point of contact for cybersecurity infrastructure within the project team.
• Coordinate implementation activities with:
  • Cybersecurity engineers
  • Network & system engineers
  • Ability to work onsite at Customer’s premises (around inner Brisbane)

• Ensure cybersecurity infrastructure designs can be adapted to national cybersecurity regulations, critical infrastructure protection laws, and data protection and logging constraints.
• Support alignment with local authorities, regulators, and assessors without hard-coding country-specific requirements into architectures.

We know talented people don’t always tick every box. If you meet many, but not all of the criteria below, we’d still love to hear from you.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Telecommunications Engineering, Automation Engineering, Electrical/Electronic Engineering, or equivalent technical disciplines.
• Preferred: Existing RIW (Rail Industry Worker) qualification or is able to obtain RIW.
• Preferred: Understanding of ETCS technology or experience working within the Rail environment will be advantageous.
• Minimum 5 years of professional experience in IT/OT Cybersecurity infrastructure, with demonstrated responsibility for network security.
• Strong hands-on experience with Juniper firewalls.
• Strong troubleshooting skills: packet captures, log analysis, traffic flow tracing, and root cause analysis.
• Solid understanding of TCP/IP, routing, DNS, proxy concepts, PKI, and SSL/TLS inspection
• Highly Regarded: Experience delivering cybersecurity infrastructures across critical-infrastructure sectors such as railway, transportation, energy/utilities, oil & gas, or other critical infrastructure environments.
• Highly Regarded: Experience in applying the following Cybersecurity standards and framework:
  • IEC 62443
  • CLC/TS 50701
  • NIST 800-82 / 800-53
  • ISO 27001 / ISO 27005

• Pragmatic engineering mindset with solid security fundamentals.
• Ability to balance cybersecurity, availability, safety, and operational constraints.
• Comfortable working in multicultural, international project environments.
• Able to mentor engineers and influence architectural decisions.

At Hitachi Rail, we know that a diverse business is a sustainable business. Working collaboratively with a range of internal networks, we’re continuously improving our policies and products. From accessible, sustainable design to achieving a better gender balance. We base these efforts on our core values: Harmony, Sincerity, and Pioneering spirit. And by aligning with these, we’re able to create a workplace where people not only feel comfortable but are given opportunities to thrive. We’re especially keen to hear from women and people of all genders considering a career in engineering, cybersecurity, and rail technology.