OT Network Security Engineer

Hitachi Rail; Brisbane; On-site; AUD 140,000 - 180,000; Full time

Benefits offered by this job

Annual performance reviews

Ongoing professional development

Health and wellbeing initiatives

Job summary

Hitachi Rail in Brisbane, Australia is seeking an OT Network Security Engineer to design, deploy, and validate security for critical infrastructure projects. You will own security architectures and hands-on firewall engineering, ensuring compliance with international standards and local regulations.

You will collaborate with cybersecurity and network engineers, coordinate on-site activities at customer premises around inner Brisbane, and mentor junior staff while balancing availability, safety

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, IT, Telecommunications Engineering, Automation Engineering, Electrical/Electronic Engineering, or equivalent technical discipline.
• Minimum 5 years of professional experience in IT/OT cybersecurity infrastructure with responsibility for network security.
• Strong hands-on experience with Juniper firewalls.
• Knowledge of cybersecurity standards: IEC 62443, NIST, ISO 27001/27005.

Responsibilities

• Design end-to-end OT network security architecture.
• Define technical standards, reference architectures, and design patterns for network security platforms.
• Design, deployment, configuration, and validation of network security platforms and Juniper firewalls.
• Produce and review security architecture documents, configuration standards, and hardening guides.
• Coordinate security FAT/SAT, testing, and integration with OT subsystems.
• Collaborate with cybersecurity engineers, network & system engineers, and onsite customer teams.

Skills

IT/OT cybersecurity

TCP/IP & network protocols

Security troubleshooting

Cybersecurity fundamentals

Education

Bachelor’s degree in Cybersecurity or related technical discipline

Tools

Juniper Firewalls

Job description

A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting-edge of digital transformation and technology. From the multi-cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there’s something for everyone to get stuck into. And that’s where you come in.

Job Description:

Hitachi Rail is looking for an enthusiastic self-motivated OT Network Security Engineer who thrives in a fast-paced environment. The successful candidate is comfortable performing a wide range of tasks from administrative to strategic. This is a fulltime permanent position based in Brisbane, Australia.

In this role you will design, implement, integrate, optimise and validate network security and firewall infrastructure for railway and critical-infrastructure projects. The role combines security architecture ownership with hands-on engineering and implementation responsibility, ensuring that cybersecurity platforms and controls are deployed according to international standards, project requirements, and local regulatory frameworks.

You will act as the technical go-to point for anything related to network security and firewalls, supporting the full lifecycle from design through commissioning and operational handover.

Key accountabilities:

OT Network Security Architecture

• Design end-to-end OT network security architecture.
• Define technical standards, reference architectures, and design patterns for network security platforms.
• Design & Implementation of Network Security Platforms

Design, deployment, configuration, and validation of Juniper Firewalls including the following network security components:

• Network and perimeter security
• Network access and identity
• Threat detection and endpoint security
• Standards Compliance & Security Assurance

Produce and review security architecture documents, design justifications, configuration standards, and hardening guides.

Define and execute security FAT/SAT, configuration and hardening validation, functional tests for security controls, and integration testing with OT subsystems.

Technical Coordination & Project Support

• Managing changes through CCR and CCB
• Serve as the primary point of contact for cybersecurity infrastructure within the project team.
• Coordinate implementation activities with:
  • Cybersecurity engineers
  • Network & system engineers
  • Ability to work onsite at Customer’s premises (around inner Brisbane)

Regulatory & Local Compliance Awareness

• Ensure cybersecurity infrastructure designs can be adapted to national cybersecurity regulations, critical infrastructure protection laws, and data protection and logging constraints.
• Support alignment with local authorities, regulators, and assessors without hard-coding country-specific requirements into architectures.

Required skills and knowledge:

We know talented people don’t always tick every box. If you meet many, but not all of the criteria below, we’d still love to hear from you.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Telecommunications Engineering, Automation Engineering, Electrical/Electronic Engineering, or equivalent technical disciplines.
• Preferred: Existing RIW (Rail Industry Worker) qualification or is able to obtain RIW.
• Preferred: Understanding of ETCS technology or experience working within the Rail environment will be advantageous.
• Minimum 5 years of professional experience in IT/OT Cybersecurity infrastructure, with demonstrated responsibility for network security.
• Strong hands-on experience with Juniper firewalls.
• Strong troubleshooting skills: packet captures, log analysis, traffic flow tracing, and root cause analysis.
• Solid understanding of TCP/IP, routing, DNS, proxy concepts, PKI, and SSL/TLS inspection
• Highly Regarded: Experience delivering cybersecurity infrastructures across critical-infrastructure sectors such as railway, transportation, energy/utilities, oil & gas, or other critical infrastructure environments.
• Highly Regarded: Experience in applying the following Cybersecurity standards and framework:
  • IEC 62443
  • CLC/TS 50701
  • NIST 800-82 / 800-53
  • ISO 27001 / ISO 27005
• Pragmatic engineering mindset with solid security fundamentals.
<
• Ability to balance cybersecurity, availability, safety, and operational constraints.
<
• Comfortable working in multicultural, international project environments.
• Able to mentor engineers and influence architectural decisions.

At Hitachi Rail, we know that a diverse business is a sustainable business. Working collaboratively with a range of internal networks, we’re continuously improving our policies and products. From accessible, sustainable design to achieving a better gender balance. We base these efforts on our core values: Harmony, Sincerity, and Pioneering spirit. And by aligning with these, we’re able to create a workplace where people not only feel comfortable but are given opportunities to thrive. We’re especially keen to hear from women and people of all genders considering a career in engineering, cybersecurity, and rail technology.

What we offer:

• Annual performance, development, and salary review process.
• Ongoing professional development and training.
• Salary continuance.
• Health and Wellbeing initiatives throughout the year (incl. flu vaccinations).
• Employee Assistance Program (employees and family).
• Days off per year sponsored by the company in addition to the statutory public holidays and leave entitlements.
• Invitation to attend and participate in Company sponsored social events throughout the year.

At Hitachi Rail, there is a place for everyone. We welcome and value differences in background, age, gender, sexuality, family status, disability, race, nationality, ethnicity, religion, and world view. It is our commitment to create an inclusive environment - we are proud to be an equal opportunity employer.