Lead Network & Cyber Security Engineer

Yokogawa Electric Corporation; Abu Dhabi; On-site; AED 300,000 - 420,000; Full time

Job summary

Yokogawa Electric Corporation is seeking a senior IT/OT cybersecurity architect to design secure OT networks and manage risk across DCS environments. You will lead a technical team, deliver architecture documents, and collaborate with customer OT groups to ensure secure integration and patch management.

The role requires deep knowledge of industrial cyber security, network design, and regulatory standards, with a strong emphasis on stakeholder engagement and practical defense-in-depth

Qualifications

• 10 to 15+ years of IT/OT experience focused on network configuration and cybersecurity for industrial control systems.
• Proven track record leading a team of network and security engineers.
• Certifications: Cisco, Nozomi, Palo Alto, VM Ware; IC32 and IEC 62443 preferred.
• Strong communication skills, both written and verbal.

Responsibilities

• Understand customer specifications and standards (CIS, IEC 62443) and prepare a compliant design and documentation.
• Lead the design of secure OT network architectures with IT-OT segmentation.
• Prepare system design documents (architecture, logical architecture, BOM, DDS, FAT/-SAT procedures).
• Conduct regular risk assessments of the OT environment and identify vulnerabilities.
• Collaborate with OT stakeholders and review third-party vendors for security compliance.
• Provide training on security best practices and perform security audits and regulatory compliance tasks.

Skills

Networking fundamentals

Network segmentation

ACL management

Security best practices

Team leadership

Stakeholder engagement

Patch management

Tools

Cisco

Nozomi

Palo Alto

VMware vSphere

Hyper-V

Veritas Net Backup

Acronis

Veeam

WhatsUp Gold

WSUS

McAfee ePO

Job description

**Not just a job, but a career**Yokogawa, award winner for ‘Best Asset Monitoring Technology’ and ‘Best Digital Twin Technology’ at the HP Awards, is a leading provider of industrial automation, test and measurement, information systems and industrial services in several industries.Our aim is to shape a better future for our planet through supporting the energy transition, (bio)technology, artificial intelligence, industrial cybersecurity, etc. We are committed to the United Nations sustainable development goals by utilizing our ability to measure and connect.**About the Team** Our 18,000 employees work in over 60 countries with one corporate mission, to \"co-innovate tomorrow\". We are looking for dynamic colleagues who share our passion for technology and care for our planet. In return, we offer you great career opportunities to grow yourself in a truly global culture where respect, value creation, collaboration, integrity, and gratitude are highly valued and exhibited in everything we do.**Key Responsibilities & Accountabilities*** Understanding customer specifications and standard guidelines such as CIS benchmark, IEC62443, etc. + Preparation of a compliance list in case of any deviation required from the standard practices followed.* Leading the design of Overall Architecture and implementation of secure OT network architectures. Ensure segmentation between IT and OT networks.* Preparation of Design Documents, such as: + System Architecture + Logical Architecture + Preparation of Bill of Material with the latest available Hardware and software + Functional Design Specification + Detail design specification + Factory Acceptance test Procedure + Site Acceptance test Procedure + Method Statement for Integration and Modification* Risk Assessment: Conduct and oversee regular risk assessments of the OT environment, identifying vulnerabilities and potential threats.* Network Segmentation: Ensure that the DCS is adequately segmented from other networks, minimizing the risk of potential intrusions from external and internal sources.* Work closely with customer OT cybersecurity teams to ensure consistent security practices across IT and OT landscapes. + Collaborate with OT stakeholders to understand unique requirements and challenges.* Review and assess third-party vendors to ensure compliance with company security policies.* Recommend security enhancements and purchases that will support the defence of the OT environments for the benefit of the client.* Provide training and guidance to OT engineers on security best practices. + Training & Awareness: Conduct cyber security training among customer-related personnel. Provide training on recognizing potential cyber threats and following best practices.* Conduct regular security audits and assessments of the OT infrastructure.* Regulatory Compliance: Ensure that OT environments comply with relevant industry regulations, standards, and best practices such as IEC 62443, NERC CIP, etc.* Stakeholder Management: Engage with client personnel and other key stakeholders to ensure alignment on cybersecurity priorities and practices.* Vendor collaboration: Interaction with various OEMs to determine the best possible solution for requirements.* Support in decision-making on Hardware selection based on CRS and cost-effectiveness.* Work closely with the DCS team to understand and address potential vulnerabilities, ensure secure integration of new system components, and obtain necessary security patches.**Qualification and Experience*** 10 to 15+ Years of experience in IT/OT for configuration of Networks and Implementation of Cyber security.* Previous experience in leading a team of network and system security engineers.* Certification on the following product is added advantage: + Cisco + Nozomi + Paulo Alto + VM Ware* Preferred Certification: + IC32, IEC62443* Communication Skills, both verbal and written.**Required Competencies / Skills****Switches – L2/L3*** Configuration Knowledge on L2 and L3 Switches* Hardening of Switches* Troubleshooting capacity on multiple security solutions* Deep level Knowledge of ACL’s + Control: Implement and manage strict access controls for the DCS environment. This includes user authentication, role-based access, and secure remote access methodologies.* Product Knowledge and Certification added advantage: + Hirshman + CISCO + Other Industrial Switches* Designing and Implementation of the network with the layer concepts + Network switch configuration* Designing the network and positioning the components based on the functionality + Routing Switch**Windows Security Update System (WSUS)*** Patch Management: Stay informed about software and firmware updates from DCS vendors. Safely and effectively implement patches while ensuring minimal disruption to operations.* Automatic Patching**NMS*** Configuration of What's Up Gold* Creating an Architecture diagram* Configuring NMS system installation to commissioning* Creating Dashboard**Antivirus*** MacAfee AV Epo* Whitelisting**Desktop-Hardening System*** Antivirus Protection* Whitelisting* Denial of Installing new Exe and Related files* Integrity control* Change Control* Application Control* Data loss prevention**Virtual Machine*** Hands-on experience in Design the VM HA cluster* Hands-on experience in Design VM Architecture* Product Knowledge: + VM Ware – vSphere + Hyper V**Backup & Recovery*** Design and engineer a backup & recovery system to ensure ICSS data integrity and availability in case of cyber incidents or system failures.* Creating the policies and Maintaining* Designing the Backup system* Expert-level Product knowledge on: + Veritas Net Backup + AcronisVeeam Backup & ReplicationYokogawa is an Equal Opportunity Employer. Yokogawa wants a diverse, equitable and inclusive culture. We will actively recruit, develop, and promote people from a variety of backgrounds who differ in terms of experience, knowledge, thinking styles, perspective, cultural background, and socioeconomic status. We will not discriminate based on race, skin color, age, sex, gender identity and expression, sexual orientation, religion, belief, political opinion, nationality, ethnicity, place of origin, disability, family relations or any other circumstances. Yokogawa values differences and enables everyone to belong, contribute, succeed, and demonstrate their full potential.