ICS/OT Security Architect: SCADA, DMZ & Compliance

ATAL Engineering Group; Hong Kong; On-site; HKD 550,000 - 900,000; Full time

Job summary

ATAL Engineering Group seeks a Security Engineer specializing in OT/ICS/SCADA security to lead risk assessments, audits and architectural hardening for wastewater control systems.

You will bridge IT and OT, implement DMZs, industrial firewalls and data diodes, and ensure HIPAA? regulations? No—HK OGCIO guidelines compliance for the company. 3–5 years in security with ISO 27001 experience is required.

Qualifications

• Bachelor’s degree in a technical field relevant to security.
• Strong background in security engineering, governance, risk and compliance.
• 3–5 years in information security with OT/ICS/SCADA security experience.
• Familiarity with ISO 27001, IEC 62443, and IT/OT mappings.

Responsibilities

• Lead Security Risk Assessments and audits (SRAA) for hardware, software and networks per ISO 27001/IEC 62443.
• Design, review and implement DMZ, industrial firewalls and data diodes to segment OT/ICS networks.
• Harden endpoints and infrastructure with patching, antivirus, IDS/IPS across servers, NAS and VMs.
• Ensure Hong Kong OGCIO guidelines compliance (S17, G3, G54, G51).
• Coordinate with external cybersecurity firms for third‑party audits and pre‑handover testing.
• Establish audit trails, logging and access controls to protect CIA of time-series and ML data.

Skills

Security engineering

Governance & compliance

OT/ICS/SCADA security

ISO 27001 ISMS

Purdue Model knowledge

Network segmentation design

Audit liaison

Education

Bachelor's degree in Information Security, Computer Science, or related

Tools

Industrial firewalls

Data diodes

IDS/IPS

SCADA platforms

Patch management tools

Job description

ATAL Engineering Group seeks a Security Engineer specializing in OT/ICS/SCADA security to lead risk assessments, audits and architectural hardening for wastewater control systems.

You will bridge IT and OT, implement DMZs, industrial firewalls and data diodes, and ensure HIPAA? regulations? No—HK OGCIO guidelines compliance for the company. 3–5 years in security with ISO 27001 experience is required.