Automation - OT/Cyber Security

IKM Consultants AS; Stavanger; Hybrid; NOK 900,000 - 1,200,000; Full time

Job summary

IKM Consultants AS in Stavanger, Norway seeks an experienced OT security engineer to design and protect network infrastructure for Operational Technology, ensuring alignment with IEC62443 and client specs.

You will participate in FAT tests, review configurations of switches/routers/firewalls, perform risk assessments, and coordinate with suppliers, contractors, and the client. The 2-year assignment is full-time and requires English language proficiency.

Qualifications

• Relevant Bachelor's or Master's degree in a related field.
• Minimum 5 years of OT security experience (engineering, design, configuration, and support of large network infrastructures).
• Minimum 5 years of work experience with network design and/or cybersecurity, preferably in oil & gas EPC projects or industrial control systems.
• Solid understanding of ICS, SCADA systems, and other OT technologies.
• Experience with designing and testing communication networks and protocols (Modbus, Profibus, IEC61850, TCP/IP, Ethernet, OPC UA).
• Experience with Purdue Model and the NIST CSF implementation.
• Familiarity with IEC62443 standard and client requirements.
• Certifications: EX (Basic) and FSE (High/Low Voltage with First Aid).
• An offshore certificate and health certificate may be required.

Responsibilities

• Define the design of network infrastructure to protect OT systems from cyber threats, ensuring compliance with customer specifications.
• Participate in FAT testing and verification of network equipment configurations, including switches, routers, and firewalls.
• Support suppliers and vendors in completing Self-Assessment Templates.
• Conduct risk assessments of supplier packages and systems based on the IEC62443 Cyber Security Standard.
• Handle interfaces with other disciplines, suppliers, contractors, and the client.
• Facilitate and lead Risk Vulnerability Analysis (RVA) workshops for operational technology systems to identify security weaknesses.

Skills

OT security

Network design

Risk assessment

ICS/OT tech

CSF familiarity

Purdue Model

NIST CSF

Industrial protocols

Education

Bachelor/Master degree

Tools

EX Basic

FSE High/Low Voltage

Offshore cert

Health cert

Job description

• Define the design of network infrastructure to protect OT systems from cyber threats, ensuring compliance with customer specifications.


• Participate in FAT testing and verification of network equipment configurations, including switches, routers, and firewalls.


• Support suppliers and vendors in completing Self-Assessment Templates.


• Conduct risk assessments of supplier packages and systems based on the IEC62443 Cyber Security Standard.


• Handle interfaces with other disciplines, suppliers, contractors, and the client.


• Facilitate and lead Risk Vulnerability Analysis (RVA) workshops for operational technology systems to identify security weaknesses.

Required expertise

• Relevant Bachelor's or Master's degree in a related field.


• Minimum 5 years of experience in Operational Technology (OT) security, focusing on engineering, design, configuration, and support of large network infrastructures.


• Minimum 5 years of work experience with network design and/or cybersecurity, preferably in oil & gas EPC projects or industrial control systems.


• Solid understanding of industrial control systems (ICS), SCADA systems, and other OT technologies.


• Experience with designing and testing communication networks and protocols (e.g., Modbus, Profibus, IEC61850, TCP/IP, Ethernet, OPC UA).


• Experience with the implementation of the Purdue Model and the NIST Cyber Security Framework (CSF).


• Familiarity with the IEC62443 standard and relevant client technical requirements.


• Required certifications: EX (Basic) and FSE (High/Low Voltage with First Aid).


• An offshore certificate and health certificate may be required.

Language: English

Location: Stavanger, Norway

Work schedule: Full-time

Duration: 2-year assignment