Senior Engineer - OT Cybersecurity

CPX; Abu Dhabi; On-site; AED 120,000 - 180,000; Full time

Job summary

CPX is looking for highly skilled Engineers, including Senior and Lead Engineers, to implement OT Cybersecurity solutions in Abu Dhabi. The focus is on hands-on deployment, configuration, and integration of various cybersecurity technologies, primarily in utility environments and control centers.

The ideal candidate should have a robust background in operational technology, extensive experience in high and low voltage substations, and a bachelor's degree in a relevant field. This role requires collaboration with cross-functional teams and adherence to industry standards.

Qualifications

• 7–12 years of experience in cyber infrastructure or utilities.
• Proven track record in implementing cybersecurity solutions.
• Experience with data center infrastructure is a plus.

Responsibilities

• Design and develop High-Level and Low-Level Design documents.
• Perform OT Cybersecurity Gap assessments and risk assessments.
• Deploy and configure cybersecurity solutions.

Skills

Operational technology (OT)

Cybersecurity technologies

Instrumentation

High and low voltage substations

Network architecture principles

Education

Bachelor’s degree in electrical engineering / Electronics / Instrumentation / Telecom / Computer Engineering

ISA 62443 / GICSP / CISSP

Tools

Nozomi Networks

Forescout

Fortinet firewalls

Acronis

VMware ESXi

Job description

We are seeking highly skilled Engineers / / Senior Engineer / Lead Engineer to support the implementation of OT Cybersecurity solutions across utility environment and master control centers. The role involves hands‑on deployment, configuration, and integration of cybersecurity technologies, infrastructure design, commissioning, and documentation. Candidates must have a strong background in operational technology (OT), instrumentation, and experience working in high and low voltage substations.

Key Responsibilities

• Design and develop High‑Level Design (HLD) and Low‑Level Design (LLD) documents for OT cybersecurity infrastructure.
• Perform OT Cybersecurity Gap assessment , risk assessments as per IEC 62443 , NIST and international standards .
• Perform cable routing and physical installation of network and security devices in substations and control centers.
• Deploy, configure, and integrate cybersecurity solutions including Nozomi Networks, Forescout, and Fortinet firewalls.
• Implement and manage Acronis backup solutions for critical OT systems.
• Design and implement a centralized DMZ architecture for secure data exchange between IT and OT networks.
• Review and validate electrical panel drawings and overall electrical design setups for compliance and integration.
• Conduct Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT) for all deployed systems.
• Prepare detailed technical reports, test plans, and documentation throughout the project lifecycle.
• Perform commissioning activities including system validation and operational readiness checks.
• Configure KVM switches for remote access and control of OT systems.
• Install and configure VMware ESXi on physical servers.
• Set up and segment virtual machines (VMs) according to network security policies.
• Create and maintain network architecture drawings using Microsoft Visio.
• Assign zones and conduits in accordance with ISA/IEC 62443 standards.
• Identify and document cable routes for all network and power connections.
• Ensure proper labeling and documentation of all installed components.
• Work with HMIs and gateways on Siemens, ABB, and Schneider Electric systems.
• Integrate and configure SICAM SCMS systems and other substation automation platforms.
• Apply instrumentation knowledge to configure and troubleshoot sensors, actuators, and control systems in substations.
• Collaborate with cross‑functional teams including network engineers, cybersecurity analysts, and utility operations staff.
• Ensure compliance with industry standards and cybersecurity best practices.

Engineering Design (HLD/LLD) & Drawing Development

• Review and validate Single Line Diagrams (SLDs), existing as‑built drawings, and brownfield constraints; raise RFIs and propose constructible solutions.
• Validate panel drawings (GA, internal layout, wiring, interconnection, termination schedules, BOM) and ensure “as‑built” updates post commissioning.
• OT Cybersecurity Infrastructure Deployment & Integration
• Implement and integrate OT cyber infrastructure components (e.g., industrial firewalls, switches, IDS sensors, secure remote access, logging collectors) according to approved LLD and standards.
• Support network cutovers, IP schemes, VLAN/VRF mapping, routing design inputs, and secure connectivity between substations and central platforms.
• Ensure installations meet required security baselines and customer utility practices (documentation, labeling, ports, hardening inputs).

Testing, FAT/SAT, Commissioning & Acceptance

• Support/lead FAT preparation and execution: test procedures, inspection checklists, configuration verification, and evidence packs.
• Execute SAT / site commissioning, including pre‑checks, power‑up, connectivity validation, link testing, redundancy checks, punch lists/snags, and final handover.
• Coordinate with OEMs and customer operations for outage windows, access approvals, and acceptance criteria signoffs.

HSE Documentation, Governance & OSHAD Compliance

• Prepare and maintain site HSE deliverables: Method Statements, Risk Assessments, Job Safety Analyses (JSA), lifting plans (if needed), toolbox talk records, and daily site safety documentation.
• Ensure compliance with Permit‑to‑Work systems, site inductions, emergency procedures, incident/near‑miss reporting and stop‑work authority as required.
• Support OSHAD‑aligned compliance expectations such as maintaining training records and competency evidence where required by the client/authority.

Data Center / Central Cyber Infrastructure Exposure

• Support design and execution for central environments (SOC / control center / data center) including rack placement, structured cabling, patching, secure network build, and platform connectivity.
• Coordinate the infrastructure needs for central management/monitoring components and ensure readiness for integration testing and operations handover. (Comparable rack/device installation and safety controls are seen in data‑center hub method statements.)
• Project Delivery Support (Planning, Coordination, Reporting)
• Contribute to project planning: WBS inputs, site readiness checklists, resource plan, dependencies, and daily/weekly progress reporting.
• Support BOQ take‑offs for panels/cabling/infrastructure and ensure materials readiness aligned with execution schedule.
• Coordinate with subcontractors for electrical/cabling works and ensure quality, safety, and documentation compliance.

Skills/Certifications (Technical & Non‑Technical)

Technical Skills / Core Competencies

• Demonstrated on‑site execution in brownfield substations / utility environments (HV/LV interfaces awareness, safe work in operational sites).
• Strong capability in panel/cabinet build supervision, cabling, termination practices, labeling, testing, and as‑built documentation.
• Proven ability to prepare HLD/LLD, implementable drawings, and engineering documentation packs.
• Understanding of OT network architecture principles (segmentation, zones/conducts), and integration constraints in utilities.
• Experience supporting FAT/SAT and commissioning activities with structured evidence and acceptance documentation.
• HSE / Compliance (Mandatory or Highly Preferred)
• Strong working knowledge of PTW systems, method statements and risk assessments for live utility sites.
• Familiarity with UAE utility HSE expectations including OSHAD‑aligned requirements and client safety governance.
• Utility Competency Certificate (e.g., Transco Competent Person or equivalent) OR demonstrable eligibility to obtain (substation experience, PTW exposure, toolbox talks, etc.).
• NEBOSH IGC (or equivalent) and OSHAD registration card.
• First Aid / Fire Fighting certificates (as commonly requested for utility site roles).
• Strong ownership mindset, coordination with multiple stakeholders (client/OEM/subcontractors), and ability to execute under schedule constraints.
• High attention to detail in drawings, cabling schedules, labeling, and evidence packs.
• Clear communication and disciplined reporting for site progress, risks, and dependencies.

Minimum Work Experience

• 7–12 years in cyber infrastructure / OT infrastructure / electrical‑telecom execution in utilities, substations, rail, or industrial environments.
• Proven track record delivering brownfield site implementation including cabling/panels and commissioning support.
• Experience in data center infrastructure (rack/cabling/network build) supporting cyber platforms is a strong advantage.

Education

• Bachelor’s degree in electrical engineering / Electronics / Instrumentation / Telecom / Computer Engineering (or equivalent relevant discipline).
• Relevant OT cybersecurity certifications (at least one):
  • ISA 62443 , GICSP ,CISSP