Lead Network and Cybersecurity Engineer

Careers; Stafford; On-site; GBP 70,000 - 110,000; Full time

Job summary

GE Grid Solutions is seeking a Lead Network and Cybersecurity Engineer to deliver secure network architectures for HVDC control and substation automation. You will drive design, testing, and commissioning across global projects, ensuring alignment with international cybersecurity standards and industry best practices.

You will collaborate with global teams, mentor junior engineers, and manage technical progress while maintaining strict security and reliability.

Qualifications

• Technical foundation in Industrial Networking, Systems Architecture, or Cybersecurity, with relevant degree or certifications.
• Experience in industrial control and protection design within Distributed Control Systems and Substation Automation (IEC 61850).
• Applied knowledge of IEC 62443 standards (parts 4-1, 4-2, 3-3, 2-4) and hands-on with firewalls (Fortinet), IDS (Nozomi, Radiflow), VPN/PKI, and endpoint security.
• Strong knowledge of Layer 2/3 protocols (IPv4, OSPF, VRRP, LACP, SNMP, SSH, SFTP).

Responsibilities

• Design and Architecture: Execute the design of secure networks and communication architectures, adhering to IEC 62443-3-3 principles.
• Compliance and Lifecycle: Ensure adherence to Secure Deployment Guides and Security Assurance Plans; monitor vulnerabilities and patch management.
• Technical Oversight: Implement IP address strategies, perform substation-level hardening, and evaluate Network and Cybersecurity solutions from 3rd party suppliers.
• Tendering and Regulatory Support: Support bidding with knowledge of regulations such as EU NIS, NERC, and BDEW; map requirements between standards.
• Operational Execution: Design, configuration, testing, FAT involvement, and on-site installation of LAN networks.
• Documentation: Maintain engineering documentation with appropriate confidentiality levels.

Skills

Industrial Networking

Systems Architecture

Cybersecurity

IEC 62443 standards

Fortinet Firewall

Nozomi IDS

Radiflow IDS

VPN/PKI

Endpoint security

Virtualization

Windows Server

IEC 61850/ Substation Automation

DNP3/Modbus TCP/IP

OPC UA

Education

Degree in related field

GICSP

ISA/IEC 62443 certification

CCNA/CCNP

Tools

Fortinet

Nozomi

Radiflow

VPN/PKI tooling

VMware

HyperV

Proxmox

Job description

Job Description Summary

Become part of a winning team and help to deliver the Green Energy transition.

At GE Grid Solutions we are electrifying the world with advanced grid technologies. As leaders in the energy space our goal is to accelerate the transition for a more energy efficient grid to full fill the needs of tomorrow. With a focus on growth and sustainability GE Grid Solutions plays a pivotable role in integrating Renewables onto the grid to drive to carbon neutral. In Grid Solutions we help enable the transition for a greener more reliable Grid. GE Grid Solutions has the most advanced and comprehensive product and solutions portfolio within the energy sector.

At GE Renewable Energy, our engineers are always up for the challenge - and we're always driven to find the best solution. Our projects are unique and interesting, and you'll need to bring a solution-focused, positive approach to each one to do your best. Surrounded by committed, loyal colleagues, if you can dare to bring your ingenuity and desire to make an impact, you'll be exposed to game-changing, diverse projects that truly allow you to play your part in the energy transition.

Job Description

Lead Network and Cybersecurity Engineer

Candidates who possess most of the experience outlined below and demonstrate strong motivation to develop expertise in the remaining areas are strongly encouraged to apply. We recognize the multifaceted nature of this role and value both proven experience and a genuine commitment to professional growth.

Role Purpose

This is a technical engineering role, operating as a key contributor within the project team to ensure the successful execution of secure network and cybersecurity solutions. As an experienced practitioner for HVDC Control and Protection, you will contribute to the technical implementation of Network and Cybersecurity standards, drive quality in secure architectural design, and support the broader engineering team. Working across global projects involving multiple stakeholders, you will own the delivery of specific workstreams, from design and configuration to testing and commissioning of digital control and Substation Automation Systems. You will serve as a reliable technical resource, ensuring that project delivery meets our high standards of security, reliability, and quality.

Leadership and Impact

Technical Implementation: Serve as a key contributor for Network and Cybersecurity domains. You will execute technical designs, validate design choices, and ensure alignment with global standards across project tasks.

Collaborative Delivery: Foster a culture of technical rigor. You will collaborate with peers and provide guidance to junior engineers, acting as a supportive team member in complex engineering environments.

Stakeholder Communication: Translate technical requirements into actionable project tasks. You will facilitate dialogue between internal teams and external suppliers, ensuring clear communication regarding technical progress and security requirements.

Risk and Quality Management: Proactively identify project-level technical risks and assist in driving resolutions. Implement improvements in engineering processes and maintain adherence to established Network and Cybersecurity best practices.

Decision Making: Operate with a high degree of independence on assigned work packages. You are empowered to make technical decisions within defined project parameters and elevate to senior leads when high-stakes challenges require additional expert input.

Key Responsibilities

• Design and Architecture: Execute the design of secure networks and communication architectures, adhering to IEC 62443-3-3 principles. Build and maintain functional infrastructure (Networking, virtualization, server OS configuration).
• Compliance and Lifecycle: Ensure consistent adherence to Secure Deployment Guides and Security Assurance Plans. Execute vulnerability monitoring, patch management, and disaster recovery processes.
• Technical Oversight: Implement IP address strategies, perform substation-level hardening, and evaluate Network and Cybersecurity solutions from 3rd party suppliers.
• Tendering and Regulatory Support: Support bidding processes with knowledge of regulations such as EU NIS, NERC, and BDEW; assist in mapping requirements between varying Network and Cybersecurity standards.
• Operational Execution: Perform design, configuration, and testing to meet project budgets and schedules. Assist in FAT (Factory Acceptance Testing) and execute on-site installation and commissioning of LAN networks.
• Documentation: Ensure all technical documentation aligns with engineering policies and procedures, including appropriate confidentiality levels.

Qualifications and Experience

• Technical Foundation: Demonstrated expertise in Industrial Networking, Systems Architecture, or Cybersecurity. Relevant technical knowledge gained through a degree in a related field OR equivalent industry-recognized certifications (e.g., GICSP, ISA/IEC 62443, CCNA/CCNP).
• Domain Expertise: Experience in industrial control and protection system design, specifically within Distributed Control Systems and Substation Automation (IEC 61850 environments).
• Cybersecurity Standards: Applied knowledge of IEC 62443 standards (parts 4-1, 4-2, 3-3, 2-4) and hands-on experience with firewalls (Fortinet), IDS (Nozomi, Radiflow), VPN/PKI, and endpoint security.
• Networking: Strong knowledge of Layer 2 and 3 protocols (IPv4, OSPF, VRRP, LACP, SNMP, SSH, SFTP). Ability to build functional infrastructure.
• Systems and Infrastructure: Experience with virtualization (VMware, HyperV, Proxmox) and Windows Server configuration.
• Industrial Protocols: Proficient in IEC 101/104, PTP, OPC UA, DNP3, Modbus TCP/IP and diagnostic debugging using Wireshark.
• Product Familiarity: Experience with GE Reason, Westermo, or Meinberg products is advantageous.

Additional Information

Relocation Assistance Provided: No

GE Vernova is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.