OT Security SME (Encryption, PKI & HSM) - Contract
Location: Newcastle - hybrid preferred (2-3 days per week onsite), however remote working will be considered with occasional site visits
Rate: £450 per day (Inside IR35) (may be negotiable DOE)
Start Date: ASAP
The Opportunity
We are seeking an experienced Operational Technology (OT) Security SME to support a large-scale cyber security programme within a critical infrastructure environment. This role will play a key part in the delivery of major Encryption, Hardware Security Module (HSM), PKI and Certificate Lifecycle Management (CLM) initiatives across complex OT and Industrial Control System (ICS) environments.
The successful consultant will act as the bridge between OT operations, engineering teams and cyber security stakeholders, ensuring security solutions are implemented safely and effectively within live operational environments.
Key Responsibilities
- Provide subject matter expertise across OT/ICS environments including SCADA, DCS, RTUs, IEDs and HMIs.
- Support the deployment and integration of Hardware Security Modules (HSMs) within operational technology and critical infrastructure environments.
- Advise on PKI architecture, certificate issuance, renewal and integration of HSM-backed cryptographic services.
- Contribute to proof-of-concept activities, testing, validation, high-availability design and failover planning.
- Provide guidance on OT change management processes, maintenance windows and operational risk considerations.
- Support security architecture discussions involving network segmentation, OT DMZ design and IT/OT boundary controls.
- Work closely with engineering, operations, cyber security and project delivery teams throughout the programme lifecycle.
- Assist with certificate lifecycle and automation requirements across large OT device estates.
- Participate in site-based activities where required, including control centre and field-based operational environments.
Required Skills & Experience
- Strong experience working within Operational Technology (OT) or Industrial Control System (ICS) environments.
- Hands-on knowledge of power, utilities, energy or other critical national infrastructure sectors.
- Experience with SCADA, control systems and industrial network architectures.
- Knowledge of industrial protocols such as DNP3, IEC 61850, Modbus and IEC 62351.
- Experience supporting or delivering HSM deployments within operational or highly regulated environments.
- Strong understanding of PKI, cryptography, certificate management and key management solutions.
- Familiarity with certificate lifecycle management (CLM) processes and tooling.
- Knowledge of network segmentation, security zones and OT security architecture principles.
- Understanding of regulatory and security frameworks such as IEC 62443, NCSC CAF and NERC CIP.
- Excellent stakeholder management and communication skills, with the ability to engage technical and non-technical audiences.
- Experience within electricity transmission, distribution, utilities or energy organisations.
- Exposure to substation environments and field engineering activities.
- Experience supporting OT laboratory environments, testing programmes or security proof-of-concepts.
- Knowledge of safety‑critical operational environments and associated governance processes.
If you are an experienced OT Security SME with expertise in HSM implementation, PKI, cryptography and critical infrastructure environments, we'd be keen to hear from you.