OT Security

KPMG Assurance and Consulting Services LLP; Bengaluru, Delhi; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

KPMG Assurance and Consulting Services LLP in Bengaluru seeks an IoT security consultant with experience across ICS/SCADA and IoT platforms. You will analyze industrial systems, design secure IoT solutions, and craft compelling proposals for clients.

The role emphasizes collaboration with architects and strong client-facing communication. Required hands-on experience with industrial protocols, IoT devices, and security tools to deliver end-to-end IoT security improvements for clients in complex

Qualifications

• Knowledge of leading IoT platforms and preferably experience with IoT platform providers.
• Experience with ICS/OTN/SCADA technologies.
• UNIX and PLC host network configurations.
• RTU/PLC microcontroller programming and development environments.
• Knowledge of a broad range of ICS software (OSI PI, Camstar, etc.).
• MSMQ message queuing technologies and databases.
• Experience in PCN network, SCADA system design, control implementation or integration.
• Proficiency with Modbus, ROC, PCCC, BSAP, OPC, etc. and APIs in industrial systems.
• Understanding ICS safety and control requirements.
• Knowledge of ICS network devices configuration (firewalls, routers, IDS, IPS).
• Familiarity with VAPT tools in SCADA environments.
• IoT communication protocols such as WirelessHART and Zigbee.
• Ability to analyze and propose secure firmware/hardware solutions.
• Understanding IoT architecture and design concepts.
• Strong client-facing skills to identify IoT opportunities and use cases.
• Collaborative approach with a technical architect to develop IoT proposals.

Responsibilities

• Identify IoT opportunities and develop business cases for clients.
• Collaborate with technical architects to develop proposals and solutions.
• Assist in secure design of IoT ecosystems including devices and network interfaces.
• Evaluate ICS/OT security requirements and propose mitigations.

Skills

IoT platform knowledge

ICS/OTN/SCADA tech

UNIX and PLC network configs

RTU/PLC programming

ICS software (OSI PI, Camstar)

MSMQ messaging

PCN network/SCADA design

Modbus/OPC/protocols

ICS infrastructure security

ICS network devices config

VAPT tools in SCADA

IoT protocols (WirelessHART, Zigbee)

Secure firmware/hardware design

IoT architecture design

Client-facing IoT opportunities

Proposal development with architects

Education

Technical Graduate

Tools

C

C++

Linux

Git

AWS

DevOps

BurpSuite

Wireshark

Arduino

Raspberry Pi

Job description

Knowledge and Experience

• Knowledge of leading IoT platforms and preferably have worked with IoT platform providers


• Experience with ICS/OTN/SCADA technologies


• Experience in UNIX and PLC host network configurations


• Experience in RTU / PLC microcontroller programming and development environments


• Knowledge of a broad range of ICS software (e.g., OSI PI, Camstar, etc.), MSMQ message queuing technologies, databases


• Experience in PCN network, SCADA system design, control implementation or integration


• Knowledge of communication protocols such as Modbus, ROC, PCCC, BSAP, OPC, etc. and APIs in industrial systems


• Understanding of ICS infrastructure safety and control requirements


• Understanding of ICS network devices (firewalls, routers, IDS, IPS, etc.) configuration and deployment architecture


• Understanding of VAPT tools in SCADA environment such as Modscan, PLCInject, Samurai STFU, mbtget, smod etc.


• Understanding on overall IoT communication protocols such as WirelessHART, Zigbee and interfacing with popular network protocols


• Exhibit ability to analyse, evaluate, exploit and propose solutions to secure firmware, hardware, radio and conventional (web, mobile, network)


• Showcase capability of understanding underlying IoT architecture and/or designing one


• Excellent client facing skills with ability to understand IoT opportunities, develop business and use case for IoT


• Work with a technical architect to develop proposal and solutions for the IoT opportunities.

Skills Required

• Education-Any Technical Graduate with below skills


• Background in cyber security, IoT security or knowledge of leading industry practices/frameworks for embedded systems


• Understanding of Embedded Systems architecture and design


• Technology: C, C++, Linux, Git, AWS, DevOps, BurpSuite, WireShark, Monicom, Moserial, Arduino, Raspberry Pi


• Understanding of communication protocols such as Zigbee, WirelessHART


• Understanding OAUTH and MUD


• Understanding of FID [Radio Frequency Code] tags and EPC [Electronic Product Code], NFC [Near Field Communication], Bluetooth and Z-Wave


• Experience with the full lifecycle of IoT including device provisioning, commissioning, and remote device management layers


• Familiarity with IIOT concepts


• Demonstrate a team-oriented and collaborative approach


• Excellent oral and written communication skills


• Ability to plan and deliver effectively with minimal supervision and guidance