Senior HVDC Network & Cybersecurity Architect

GE Vernova, Inc.; Creswell; On-site; GBP 70,000 - 110,000; Full time

Job summary

GE Vernova in the United Kingdom seeks a Senior Network & Cybersecurity Engineer to define substation LAN networks and ensure cybersecurity compliance for HVDC Substation Automation Systems. You will lead requirement, design, implementation and development for the digital control system of HVDC Control & Protection.

You will work on large global projects, coordinating with stakeholders, suppliers and Tendering teams to ensure secure delivery and adherence to IEC62443 standards.

Qualifications

• Degree in Electronics/Electrical engineering or related field.
• Strong background in Networking & Cybersecurity.
• Extensive years of experience in control and protection system design.
• Knowledge of industrial communication networks such as IEC61850 and Ethernet based protocols.
• Knowledge of security hardening and cybersecurity best practices.

Responsibilities

• Design secure networks and Communication Architectures of the HVDC Control System from concept to commissioning based on IEC 62443-3-3.
• Act as the point of contact for all cybersecurity and networking matters in a project environment.
• Support Tendering teams during bidding for cybersecurity and networking requirements.
• Ensure Secure Deployment Guides and Security Assurance Plans are followed.
• Lead design, configuration and testing to deliver on time and within defined budgets.

Skills

Networking

Cybersecurity

IEC 62443

HVDC Systems

VPN & PKI

Industrial Protocols

Subnetting & VLANs

Firewall Configuration

IDS Tools (Nozomi/Radiflow)

Diagnostics & Troubleshooting

Education

Electronics/Electrical Engineering degree

Tools

Fortinet

VMware/Hyper-V/Proxmox

Wireshark

OPC UA

DNP3/Modbus

Job description

Job Description Summary

This is a senior technical engineering leadership role, operating as the bridge between technical execution and project management. As a primary authority for HVDC Control and Protection, you will contribute to the technical strategy for Network and Cybersecurity, drive excellence in secure architectural design and mentor the engineering team. Working across large scale global projects involving multiple stakeholders, you will lead the full lifecycle, from requirements and design to implementation and development of digital control and Substation Automation Systems. You will serve as the go to expert, ensuring that both internal projects and external stakeholder delivery meet the highest standards of innovation, security, reliability and quality.

Job Description

Candidates who possess most of the experience outlined below and demonstrate strong motivation to develop expertise in the remaining areas are strongly encouraged to apply. We recognize the multifaceted nature of this role and value both proven experience and a genuine commitment to professional growth.

Leadership and Impact

• Technical Authority and Governance: Serve as the Technical Authority for Network and Cybersecurity domains. You will steer technical direction, approve design choices, and ensure alignment across global, large-scale projects.
• Influential Leadership: Drive engineering excellence. You will act as a mentor, fostering a culture of technical rigor and innovation, and act as a coach for junior and mid-level engineers.
• Strategic Stakeholder Management: Translate complex technical strategies into clear business impacts for senior leadership and customers. You will advocate for the team’s technical strategy and facilitate open dialogue between cross functional teams and external suppliers.
• Innovation Champion: Proactively identify project risks and technical debt, driving timely resolution and implementing continuous improvements in engineering processes, Network and Cybersecurity standards, quality, and best practices.
• Decision Making: Operate with autonomy. You are empowered to make high-stakes technical decisions and pull in specialized experts when necessary to ensure successful delivery.

Key Responsibilities

• Design and Architecture: Lead the end-to-end design of secure networks and communication architectures, adhering to IEC 62443 3 3 principles. Build functional infrastructure from the ground up (Networking, virtualization, server OS).
• Compliance and Lifecycle: Ensure adherence to Secure Deployment Guides and Security Assurance Plans. Manage vulnerability monitoring, patch management and disaster recovery processes.
• Technical Oversight: Define IP address strategies, perform substation level hardening, and evaluate Network and Cybersecurity solutions from 3rd party suppliers.
• Tendering and Regulatory Support: Support bidding processes with knowledge of regulations such as EU NIS, NERC, and BDES; map requirements between varying Network and Cybersecurity standards.
• Operational Execution: Lead design, configuration, and testing to meet project budgets and schedules. Oversee FAT (Factory Acceptance Testing) and assist with on-site installation and commissioning of LAN networks.
• Documentation: Ensure all technical documentation aligns with engineering policies and procedures, including appropriate confidentiality levels.

Qualifications and Experience

• Technical Foundation: Proven expertise in Industrial Networking, Systems Architecture, or Cybersecurity. You should possess relevant technical knowledge gained through either a degree in a related field OR equivalent industry recognized certifications (e.g., GICSP, ISA/IEC 62443 Expert, CCNP, CCIE, VCP).
• Domain Expertise: Experience in industrial control and protection system design, specifically within Distributed Control Systems and Substation Automation (IEC 61850 environments).
• Cybersecurity Standards: Applied expertise in IEC 62443 standards (parts 4 1, 4 2, 3 3, 2 4) and hands on experience with firewalls (Fortinet), IDS (Nozomi, Radiflow), VPN/PKI, and endpoint security.
• Networking: Excellent knowledge of Layer 2 and 3 protocols (IPv4, OSPF, VRRP, LACP, SNMP, SSH, SFTP). Ability to build functional infrastructure from the ground up.
• Systems and Infrastructure: Experience with virtualization (VMware, HyperV, Proxmox) and Windows Server configuration.
• Industrial Protocols: Proficient in IEC 101/104, PTP, OPC UA, DNP3, Modbus TCP/IP and diagnostic debugging using Wireshark.
• Product Familiarity: Experience with GE Reason, Westermo, or Meinberg products is advantageous.

Additional Information

Relocation Assistance Provided: Yes