OT Network Security Engineer

Hitachi, Ltd.; Brisbane; On-site; AUD 120,000 - 160,000; Full time

Benefits offered by this job

Salary review

Professional development

Health and wellbeing initiatives

Employee assistance program

Extra days off

Job summary

Hitachi Rail is seeking an enthusiastic OT Network Security Engineer for a full-time permanent role based in Brisbane, Australia. The role covers design, implementation, and validation of OT network security and firewall infrastructure for rail and critical infrastructure projects.

You will own security architecture and hands-on engineering, serving as the technical go-to for network security and firewalls throughout the project lifecycle—from design to commissioning and handover.

Qualifications

• Bachelor’s degree in cybersecurity or related technical discipline.
• Minimum 5 years of professional IT/OT cybersecurity infrastructure experience.
• Hands-on experience with Juniper firewalls and security platforms.
• Familiarity with IEC 62443, NIST 800-82/53, ISO 27001 standards is desirable.

Responsibilities

• Design end-to-end OT network security architecture.
• Define technical standards, reference architectures and design patterns for security platforms.
• Design and implement network security platforms and firewalls (Juniper).
• Coordinate security validation tests, FAT/SAT and handover to operations.
• Act as the primary security-architecture owner within project teams.

Skills

Juniper firewalls

TCP/IP fundamentals

Troubleshooting

Network security

PKI SSL inspection

Routing concepts

Threat detection

Education

Bachelor’s degree in Cybersecurity/related field

Job description

About Us

A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting-edge of digital transformation and technology. From the multi-cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there’s something for everyone to get stuck into. And that’s where you come in.

Job Description

Hitachi Rail is looking for an enthusiastic self-motivated OT Network Security Engineer who thrives in a fast‑paced environment. The successful candidate is comfortable performing a wide range of tasks from administrative to strategic. This is a fulltime permanent position based in Brisbane, Australia.

In this role you will design, implement, integrate, optimise and validate network security and firewall infrastructure for railway and critical‑infrastructure projects. The role combines security architecture ownership with hands‑on engineering and implementation responsibility, ensuring that cybersecurity platforms and controls are deployed according to international standards, project requirements, and local regulatory frameworks.

You will act as the technical go‑to point for anything related to network security and firewalls, supporting the full lifecycle from design through commissioning and operational handover.

Key accountabilities

OT Network Security Architecture

• Design end-to-end OT network security architecture.
• Define technical standards, reference architectures, and design patterns for network security platforms.
• Design & Implementation of Network Security Platforms

Design, deployment, configuration, and validation of Juniper Firewalls including the following network security components:

• Network and perimeter security
• Network access and identity
• Threat detection and endpoint security
• Network Intrusion Detection/Prevention Systems
• Standards Compliance & Security Assurance

Produce and review security architecture documents, design justifications, configuration standards, and hardening guides.

Testing, Validation & Commissioning

Define and execute security FAT/SAT, configuration and hardening validation, functional tests for security controls, and integration testing with OT subsystems.

Technical Coordination & Project Support

• Managing changes through CCR and CCB
• Serve as the primary point of contact for cybersecurity infrastructure within the project team.
• Coordinate implementation activities with:
  • Cybersecurity engineers
  • Network & system engineers
  • Ability to work onsite at Customer’s premises (around inner Brisbane)

Regulatory & Local Compliance Awareness

• Ensure cybersecurity infrastructure designs can be adapted to national cybersecurity regulations, critical infrastructure protection laws, and data protection and logging constraints.
• Support alignment with local authorities, regulators, and assessors without hard‑coding country‑specific requirements into architectures.

Required skills and knowledge

We know talented people don’t always tick every box. If you meet many, but not all of the criteria below, we’d still love to hear from you.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Telecommunications Engineering, Automation Engineering, Electrical/Electronic Engineering, or equivalent technical disciplines.
• Preferred: Existing RIW (Rail Industry Worker) qualification or is able to obtain RIW.
• Preferred: Understanding of ETCS technology or experience working within the Rail environment will be advantageous.
• Minimum 5 years of professional experience in IT/OT Cybersecurity infrastructure, with demonstrated responsibility for network security.
• Strong hands‑on experience with Juniper firewalls.
• Strong troubleshooting skills: packet captures, log analysis, traffic flow tracing, and root cause analysis.
• Solid understanding of TCP/IP, routing, DNS, proxy concepts, PKI, and SSL/TLS inspection
• Highly Regarded: Experience delivering cybersecurity infrastructures across critical‑infrastructure sectors such as railway, transportation, energy/utilities, oil & gas, or other critical infrastructure environments.
• Highly Regarded: Experience in applying the following Cybersecurity standards and framework:
  • IEC 62443
  • CLC/TS 50701
  • NIST 800-82 / 800-53
  • ISO 27001 / ISO 27005

Professional Competencies

• Pragmatic engineering mindset with solid security fundamentals.
• Ability to balance cybersecurity, availability, safety, and operational constraints.
• Comfortable working in multicultural, international project environments.
• Able to mentor engineers and influence architectural decisions.

At Hitachi Rail, we know that a diverse business is a sustainable business. Working collaboratively with a range of internal networks, we’re continuously improving our policies and products. From accessible, sustainable design to achieving a better gender balance. We base these efforts on our core values: Harmony, Sincerity, and Pioneering spirit. And by aligning with these, we’re able to create a workplace where people not only feel comfortable but are given opportunities to thrive. We’re especially keen to hear from women and people of all genders considering a career in engineering, cybersecurity, and rail technology.

What we offer

• Annual performance, development, and salary review process.
• Ongoing professional development and training.
• Salary continuance.
• Health and Wellbeing initiatives throughout the year (incl. flu vaccinations).
• Employee Assistance Program (employees and family).
• Days off per year sponsored by the company in addition to the statutory public holidays and leave entitlements.
• Invitation to attend and participate in Company sponsored social events throughout the year.

Thank you for your interest in Hitachi Rail. If your application is of interest, we will be in contact. Please do not hesitate to discover more about us and our latest jobs at https://www.hitachirail.com/careers.

At Hitachi Rail, there is a place for everyone. We welcome and value differences in background, age, gender, sexuality, family status, disability, race, nationality, ethnicity, religion, and world view. It is our commitment to create an inclusive environment - we are proud to be an equal opportunity employer.

We would be delighted if you would be one of our followers at https://www.linkedin.com/company/hitachirail