Principal OT Cybersecurity Infrastructure Engineer

Hitachi Rail Limited; Sydney; On-site; AUD 160,000 - 210,000; Full time

Benefits offered by this job

Annual performance review

Health and Wellbeing initiatives

Employee Assistance Program

Professional development & training

Job summary

Hitachi Rail Limited seeks a Principal OT Cybersecurity Infrastructure Engineer in Sydney, Australia. You will design, implement, and validate complete OT cybersecurity infrastructure for critical infrastructure projects, acting as the technical authority for security platforms across the full lifecycle.

The role requires five+ years in IT/OT cybersecurity, hands-on experience with IEC 62443 and related standards, and collaboration with multidisciplinary teams to meet regulatory obligations.

Qualifications

• Engineering degree enabling full membership to Engineers Australia.
• Bachelor’s degree in cybersecurity, computer science, information tech, or related field.
• Master’s in cybersecurity or systems engineering desirable.
• At least five years in IT/OT cybersecurity infrastructure including architecture.
• Experience in railway, energy, utilities, or critical infrastructure environments.
• Hands-on design, integration, testing, and commissioning of security platforms.

Responsibilities

• Define end-to-end OT cybersecurity architectures using zones and defence in depth.
• Lead design, configuration, integration, and validation of security platforms.
• Translate IEC 62443, NIST, ISO requirements into practical controls.
• Define and execute security FAT/SAT, hardening, and tests.
• Coordinate with OT, network, SOC, vendors; manage dependencies.
• Mentor engineers and adapt designs to Australian regulatory obligations.

Skills

Security architecture

OT cybersecurity

Defence in depth

Network security

Identity access mgmt

Regulatory compliance

Education

Bachelor's in engineering or cyber

Master's in cybersecurity desirable

Tools

NIST

ISO 27001

IEC 62443

Job description

Principal OT Cybersecurity Infrastructure Engineer

A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting-edge of digital transformation and technology. From the multi-cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there’s something for everyone to get stuck into. And that’s where you come in.

Job Description:

Hitachi Rail is looking for an enthusiastic self-motivated Principal OT Cybersecurity Infrastructure Engineer who thrives in a fast-paced environment. The successful candidate is comfortable performing a wide range of tasks from administrative to strategic. The position is based in Sydney, Australia.

Designs, implements, integrates, and validates complete OT cybersecurity infrastructure for railway and other critical-infrastructure projects. The role combines ownership of security architecture with hands‑on engineering, ensuring that platforms and controls meet project requirements, international standards, and applicable Australian regulatory obligations. Acting as the technical authority for security platforms, the role supports the full lifecycle from concept and detailed design through testing, commissioning, operational handover, and ongoing assurance.

Key responsibilities:

• Architecture and technical authority: Define end‑to‑end, vendor‑agnostic OT cybersecurity architectures using zones and conduits, defence in depth, secure segmentation, high availability, and resilient design principles. Establish reusable technical standards, reference architectures, and integration patterns across projects and regions.
• Platform design and implementation: Lead the design, configuration, integration, and validation of network and perimeter security, identity and access management, threat detection, SOC‑enabling technologies, data protection, cyber recovery, and secure core IT/OT infrastructure.
• Standards and assurance: Translate IEC 62443, CLC/TS 50701, NIST, and ISO requirements into practical controls. Maintain traceability from requirements and risk assessments through architecture, implementation, testing, and assurance evidence.
• Testing and commissioning: Define and execute security FAT and SAT activities, hardening and configuration checks, functional control tests, and integration tests with OT subsystems. Support vulnerability reviews, remediation, Security Case inputs, and operational acceptance.
• Technical coordination: Coordinate with OT, network, systems, SOC, vendor, and systems‑integration teams. Plan technical work, manage dependencies and interfaces, identify delivery risks, and provide clear progress reporting.
• Regulatory alignment and leadership: Adapt designs to Australian critical‑infrastructure, cybersecurity, data‑protection, and logging obligations while preserving reusable architectural principles. Mentor engineers and influence multidisciplinary design decisions.

Required skills, knowledge, and experience:

• An engineering degree enabling full membership to Engineers Australia
• Bachelor’s degree in cybersecurity, computer science, information technology, telecommunications engineering, automation engineering, systems engineering, or an equivalent technical discipline.
• A master’s degree in cybersecurity, information assurance, or systems engineering is desirable.
• At least five years of professional experience in IT/OT cybersecurity infrastructure, including responsibility for architecture and deployment.
• Demonstrated delivery experience in railway, transportation, energy, utilities, oil and gas, or another critical‑infrastructure environment.
• Hands‑on experience designing, configuring, integrating, testing, and commissioning cybersecurity platforms and controls.
• Practical application of IEC 62443, including zones and conduits, defence in depth, security levels, and system and component requirements.
• Experience producing architecture, configuration, hardening, test, assurance, and operational handover documentation.

Rail and Australian Context

• Experience applying CLC/TS 50701 in railway projects.
• Ability to adapt cybersecurity architectures and controls to Australian regulatory, critical‑infrastructure, data‑protection, and logging obligations.
• Experience engaging with project assurance stakeholders, assessors, regulators, vendors, and systems integrators is desirable.

Desirable Certifications

• CISSP, CISM, or CRISC.
• GIAC GICSP, GRID, or GCIP.
• IEC 62443 cybersecurity certification.

At Hitachi Rail, we know that a diverse business is a sustainable business. Working collaboratively with a range of internal networks, we’re continuously improving our policies and products. From accessible, sustainable design to achieving a better gender balance. We base these efforts on our core values: Harmony, Sincerity, and Pioneering spirit. And by aligning with these, we’re able to create a workplace where people not only feel comfortable but are given opportunities to thrive. We’re especially keen to hear from women and people of all genders considering a career in engineering, cybersecurity, and rail technology.

What we offer:

• Annual performance, development, and salary review process.
• Ongoing professional development and training.
• Salary continuance.
• Health and Wellbeing initiatives throughout the year (incl. flu vaccinations).
• Employee Assistance Program (employees and family).
• Days off per year sponsored by the company in addition to the statutory public holidays and leave entitlements.
• Invitation to attend and participate in Company sponsored social events throughout the year.

Thank you for your interest in Hitachi Rail. If your application is of interest, we will be in contact. Please do not hesitate to discover more about us and our latest jobs at https://www.hitachirail.com/careers.

At Hitachi Rail, there is a place for everyone. We welcome and value differences in background, age, gender, sexuality, family status, disability, race, nationality, ethnicity, religion, and world view. It is our commitment to create an inclusive environment - we are proud to be an equal opportunity employer.

We would be delighted if you would be one of our followers at https://www.linkedin.com/company/hitachirail