OT Security Engineer

Ecotal; Raleigh; Híbrido; CAD 156 000 - 228 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

15 days PTO

401(k) Match

Wellness stipend

Family planning stipend

Parental leave

Resumo da oferta

Ecotal is seeking an OT Security Engineer to own the protective and recovery controls across our OT/ICS, SCADA, and energy storage environments. This hands-on role requires a safety-first mindset and coordination with our managed security partner for monitoring and incident response.

You will design segmentation, implement access controls, and stand up OT tooling. The position reports to the Manager of OT Security and offers a hybrid schedule, with a preferred Durham, NC location.

Qualificações

• 5+ years in OT/ICS security, industrial network engineering, or control-system engineering in utilities.
• Hands-on with network segmentation, industrial firewall and DMZ design, secure remote access.
• Familiar with SCADA/PLC/RTU protocols and OT architectures.
• Knowledge of IEC 62443 and NIST SP 800-82.
• OT mindset prioritizes safety and availability over confidentiality; testing before deployment.
• Bachelor’s degree or equivalent hands-on ICS/OT experience.

Responsabilidades

• Design and maintain OT network segmentation, security zones, and DMZs.
• Harden OT assets and manage baseline deviations prioritising availability.
• Implement least-privilege and MFA for remote/interactive access.
• Define change-management test and rollback plans for OT changes.
• Apply cryptographic protections in transit and at rest where feasible.
• Engineer backups and recovery for critical OT systems and configurations.
• Partition systems into zones to support OT risk assessments per IEC 62443-3-2.
• Select and operate OT security tooling with the MSP integration.
• Lead containment, eradication, and recovery during OT incidents.

Conhecimentos

OT/ICS security

Industrial network engineering

Secure remote access

Security tooling design

Formação académica

Bachelor's degree in engineering, computer science, cybersecurity, or related field

Ferramentas

OT monitoring platforms

Descrição da oferta de emprego

Our client operates and maintains a geographically distributed fleet of utility-scale solar and energy storage assets. Our Operational Technology (OT) Security Program protects the control and monitoring systems that keep that fleet running safely and reliably. As we scale, we are building the internal team that will build and run it — a ground-floor opportunity to shape OT security across a growing renewables fleet.

As OT Security Engineer, you are the hands-on technical owner of the Program’s protective and recovery controls across our transmission and distribution generation facilities, battery storage, and SCADA environments. You will design and implement segmentation, hardening, access controls, and recovery capability, and stand up the OT-appropriate security tooling the Program depends on. This is engineering work that lives close to live operations, so a safety-first, availability-first mindset is essential.

Our 24/7 monitoring, detection, and first-line response are delivered by a managed security service provider under contract. Your role is the technical build and engineering the provider cannot do for us: standing up controls and tooling, and leading the technical response when an incident is escalated to us. You will work closely with the provider on tooling integration and incident handoff.

Reports to: Manager of OT Security

Responsibilities

• Design and maintain network segmentation across the OT fleet — security zones and conduits, the IT/OT boundary (firewalls and DMZ), and deny-by-default traffic flows; secure wireless, cellular, and field communications.
• Build and maintain secure configuration baselines by device type; harden OT assets and manage baseline deviations, with availability and safety taking precedence.
• Implement OT access controls: least-privilege, role-based access; multi-factor authentication for remote and interactive access; brokered and monitored vendor and provider remote access; and enforced credential standards.
• Assess the security impact of OT changes and define test and rollback plans within the change-management process.
• Apply cryptographic protections to OT data in transit and at rest where technically feasible and operationally appropriate.
• Engineer and test backups and recovery for critical OT systems and configurations; support recovery objectives and documented recovery procedures.
• Partition systems into zones and conduits and help determine target security levels to support OT risk assessments (aligned to IEC 62443-3-2).
• Select, stand up, and operate OT-appropriate security tooling - passive or low-impact where active scanning is unsafe - integrated with our managed security provider’s services.
• Lead technical containment, eradication, and recovery during OT security incidents.

Education & Experience Required

• 5+ years in OT/ICS security, industrial network engineering, or control-system engineering - ideally in generation, energy storage, or utilities.
• Hands-on experience with network segmentation, industrial firewall and DMZ design, and secure remote access for control environments.
• Working familiarity with ICs/OT architectures and protocols (e.g., SCADA, PLC/RTU, battery management and power-conversion systems; Modbus, DNP3, IEC 61850) and their operational constraints.
• Working knowledge of IEC 62443 (particularly system requirements and zones and conduits) and NIST SP 800-82.
• A demonstrated OT mindset: safety and availability take precedence over confidentiality, and controls are tested before deployment.
• Bachelor’s degree in engineering, computer science, cybersecurity, or a related field - or equivalent hands-on experience in industrial control systems, OT/ICS networks, or control-system engineering.

Preferred Qualifications

• GICSP, GRID, or equivalent OT/ICS security certification.
• Experience deploying OT-specific monitoring or asset-visibility platforms (passive detection tooling).
• Familiarity with NERC CIP low impact obligations as they touch electronic and physical access controls.
• Direct experience with battery energy storage, utility-scale solar, or renewables.

Location

The preferred location for this role is one of our office locations: Durham, NC. Our team operates on a hybrid schedule, with in-office schedule of three days per week.

• 15 days of Paid Time Off, accrual up to 20 days, 11 observed holidays.
• 401(k) Match
• Wellness stipend, family planning stipend, and generous parental leave