Automation - OT/Cyber Security

IKM; Stavanger; Hybrid; NOK 900,000 - 1,200,000; Full time

Job summary

IKM in Stavanger, Norway, is seeking an experienced OT security engineer to design and protect large-scale network infrastructures for industrial control systems. You will drive FAT testing and support supplier assessments while applying IEC62443 standards and NIST CSF guidance.

Responsibilities include coordinating with multiple disciplines, vendors, and the client, plus leading RVA workshops to identify weaknesses and improve resilience in OT environments.

Qualifications

• Bachelor's or Master's degree in a related field.
• 5+ years OT security experience, focusing on engineering, design, and support of large network infrastructure.
• 5+ years in network design or cybersecurity, preferably in oil & gas EPC or industrial control systems.
• Strong understanding of ICS/SCADA and OT technologies.
• Experience with Modbus, Profibus, IEC61850, TCP/IP, Ethernet, OPC UA.
• Experience with Purdue Model and NIST CSF.
• Familiarity with IEC62443 and client requirements.
• Certifications: EX (Basic) and FSE (High/Low Voltage with First Aid).
• Offshore and health certificates may be required.

Responsibilities

• Define the design of network infrastructure to protect OT systems per customer specs.
• Participate in FAT testing and verify network equipment configurations.
• Support suppliers and vendors in completing Self-Assessment Templates.
• Conduct risk assessments of supplier packages per IEC62443.
• Interface with disciplines, suppliers, contractors, and client.
• Lead RVA workshops for OT systems to identify security weaknesses.

Skills

OT security

Network design

Cybersecurity

FAT testing

Risk assessment

ICS/SCADA

Purdue model

NIST CSF

IEC62443

Vendor coordination

Education

Bachelor's or Master's in related field

Tools

Modbus

Profibus

IEC61850

TCP/IP

Ethernet

OPC UA

Job description

• Define the design of network infrastructure to protect OT systems from cyber threats, ensuring compliance with customer specifications.
• Participate in FAT testing and verification of network equipment configurations, including switches, routers, and firewalls.
• Support suppliers and vendors in completing Self-Assessment Templates.
• Conduct risk assessments of supplier packages and systems based on the IEC62443 Cyber Security Standard.
• Handle interfaces with other disciplines, suppliers, contractors, and the client.
• Facilitate and lead Risk Vulnerability Analysis (RVA) workshops for operational technology systems to identify security weaknesses.

Required expertise

• Relevant Bachelor's or Master's degree in a related field.
• Minimum 5 years of experience in Operational Technology (OT) security, focusing on engineering, design, configuration, and support of large network infrastructures.
• Minimum 5 years of work experience with network design and/or cybersecurity, preferably in oil & gas EPC projects or industrial control systems.
• Solid understanding of industrial control systems (ICS), SCADA systems, and other OT technologies.
• Experience with designing and testing communication networks and protocols (e.g., Modbus, Profibus, IEC61850, TCP/IP, Ethernet, OPC UA).
• Experience with the implementation of the Purdue Model and the NIST Cyber Security Framework (CSF).
• Familiarity with the IEC62443 standard and relevant client technical requirements.
• Required certifications: EX (Basic) and FSE (High/Low Voltage with First Aid).
• An offshore certificate and health certificate may be required.

Language: English

Location: Stavanger, Norway

Work schedule: Full-time

Duration: 2-year assignment