Automation - OT/Cyber Security

IKM Gruppen AS; Stavanger; On-site; NOK 900,000 - 1,200,000; Full time

Job summary

IKM Gruppen AS in Stavanger, Norway seeks an experienced OT security engineer to design and secure large-scale network infrastructures for critical industrial control systems. You will participate in FAT tests, verify configurations of switches, routers and firewalls, and support vendors with Self-Assessment Templates while aligning with IEC62443 and NIST CSF standards.

Offshore health certs may be required.

Qualifications

• Bachelor's or Master's degree in a related field.
• 5+ years of experience in OT security, focusing on engineering, design, configuration, and support of large network infrastructures.
• 5+ years of experience with network design and/or cybersecurity in oil & gas EPC projects or industrial control systems.
• Solid understanding of ICS, SCADA, and OT technologies.
• Experience with designing and testing communication networks and protocols (Modbus, Profibus, IEC61850, TCP/IP, Ethernet, OPC UA).
• Experience implementing the Purdue Model and the NIST Cyber Security Framework (CSF).
• Familiarity with the IEC62443 standard and relevant client requirements.
• EX (Basic) and FSE (High/Low Voltage with First Aid) certifications; offshore and health certificates may be required.

Responsibilities

• Define the design of network infrastructure to protect OT systems, compliant with customer specs.
• Participate in FAT testing and verify configurations of switches, routers, and firewalls.
• Support suppliers and vendors with Self-Assessment Templates.
• Conduct risk assessments of supplier packages based on IEC62443.
• Interface with other disciplines, suppliers, contractors, and the client.
• Facilitate and lead RVA workshops for OT systems to identify security weaknesses.

Skills

OT security

Network design

ICS/SCADA

Purdue Model

NIST CSF

Education

Bachelor's or Master's

Job description

• Define the design of network infrastructure to protect OT systems from cyber threats, ensuring compliance with customer specifications.
• Participate in FAT testing and verification of network equipment configurations, including switches, routers, and firewalls.
• Support suppliers and vendors in completing Self-Assessment Templates.
• Conduct risk assessments of supplier packages and systems based on the IEC62443 Cyber Security Standard.
• Handle interfaces with other disciplines, suppliers, contractors, and the client.
• Facilitate and lead Risk Vulnerability Analysis (RVA) workshops for operational technology systems to identify security weaknesses.

Required expertise

• Relevant Bachelor's or Master's degree in a related field.
• Minimum 5 years of experience in Operational Technology (OT) security, focusing on engineering, design, configuration, and support of large network infrastructures.
• Minimum 5 years of work experience with network design and/or cybersecurity, preferably in oil & gas EPC projects or industrial control systems.
• Solid understanding of industrial control systems (ICS), SCADA systems, and other OT technologies.
• Experience with designing and testing communication networks and protocols (e.g., Modbus, Profibus, IEC61850, TCP/IP, Ethernet, OPC UA).
• Experience with the implementation of the Purdue Model and the NIST Cyber Security Framework (CSF).
• Familiarity with the IEC62443 standard and relevant client technical requirements.
• Required certifications: EX (Basic) and FSE (High/Low Voltage with First Aid).
• An offshore certificate and health certificate may be required.

Language: English

Location: Stavanger, Norway

Work schedule: Full-time

Duration: 2-year assignment