ICS Cybersecurity Engineer - Renewable Power

Air Products; Duba; On-site; SAR 200,000 - 280,000; Full time

Job summary

Air Products is seeking a Cybersecurity Engineer – Renewable Power Sector to ensure cyber resilience for large-scale renewable assets in Saudi Arabia. You will work from Duba on an 8 weeks on / 2 weeks off rotation, coordinating with engineering, commissioning, and client teams to validate and enforce cybersecurity controls across assets.

The role requires 10–15 years in OT with a focus on industrial cyber solutions, familiarity with ISA/IEC62443 and Saudi standards, and strong communication

Qualifications

• Bachelor-level engineering degree required with significant OT/ICS exposure.
• 10–15 years in OT with 3+ years in cyber design/validation for industrial control systems.
• Experience with Saudi HCIS, NCA, or ISA 62443 standards is essential.
• Strong knowledge of SAS/SCADA/DCS/PLCs, and relevant protocols.

Responsibilities

• Field verification of cybersecurity design for renewable power assets.
• Ensure cybersecurity controls for Solar PV, Wind, BESS, substations, and grid interfaces.
• Develop and verify OT cybersecurity asset registers and risk registers.
• Lead cyber risk assessments and track mitigation actions with vendors.
• Validate firewall rules and secure remote access before energization.
• Oversee FAT, SAT, CSAT, and performance testing of control systems.
• Coordinate with subcontractors and OEMs on cybersecurity during construction.
• Interface with project execution teams, OEMs, grid operators, and clients.

Skills

OT cybersecurity

SCADA/ICS knowledge

Industrial networks

Risk assessment

Communication skills

Education

Engineering degree (electronics, instrumentation, or communications)

Tools

Firewall systems

IDS/IPS

Modbus/IEC61850 protocols

Vulnerability assessments

Secure remote access tooling

Job description

At Air Products, we reimagine what’s possible. By tapping into the motivation of our people and our collective experience, we create the ideas and innovations that drive us forward. When we come together – where every voice is heard and everyone knows they belong and matter – we create solutions that launch people into space, support lifesaving care in hospitals, and enable the construction of groundbreaking, world scale production facilities.

Reimagine What’s Possible

NEOM Green Hydrogen Project is part of the most complex capital project and a flagship project at scale for Air Products. Air Products is executing an EPC Contract with the customer – NEOM Green Hydrogen Company (NGHC). Air Products has the responsibility to design, build and deliver Process Controls / Process Automation System and IT/Digital Technology infrastructure scope. This scope shall comply with the local laws and regulations on cybersecurity, which is a crucial part in the project’s safety, security and overall compliance.

The Cybersecurity Engineer – Renewable Power Sector is a senior technical competent individual contributor within the Project Cybersecurity Taskforce, responsible for assuring cybersecurity compliance, resilience, and safe operation of power generation and power transmission systems supporting large scale renewable energy assets (Solar PV, Wind Turbines, BESS, HV/MV substations, and grid interfaces).

The Engineer is also responsible for coordinating with Engineering, Pre‑Commissioning, Commissioning and Client operations team related to Cyber Security field verifications.

The Cyber Security engineer acts as the technical interface between Air Products project execution, commissioning teams and the vendors, during the field verification of cyber assets.

Experience in supporting large scale construction, pre commissioning, commissioning, startup and handover phases, ensuring cybersecurity controls are implemented without impacting schedule critical activities.

This position is based out of Duba, Tabuk Region, Saudi Arabia working on rotation of 8 Weeks ON / 2 Weeks OFF.

Duties

• Perform field verification and validation of cybersecurity design and implementation for renewable power generation and transmission assets, ensuring compliance with Saudi and international standards.
• Assure cybersecurity controls for Solar PV plants, Wind Turbine systems, BESS, HV/MV substations, and grid interconnections, including PCC and EMS interfaces.
• Develop, maintain, and verify OT cybersecurity asset registers, network diagrams, zone‑conduit models, and risk registers for power systems.
• Lead and support cyber risk assessments for power packages and OEM skid systems; track and close mitigation actions with vendors and contractors.
• Support pre‑commissioning and commissioning by validating firewall rules, secure remote access, endpoint hardening, role‑based access control, logging, and monitoring prior to system energization.
• Oversee and participate in FAT, SAT, CSAT, and performance testing for substation automation systems, turbine control systems, and plant SCADA.
• Coordinate closely with subcontractors and OEMs to control third‑party access, remote connectivity, and cybersecurity compliance during construction and startup.
• Act as the technical cybersecurity interface between project execution, commissioning teams, OEMs, grid operators, and client representatives.
• Support change management to ensure cybersecurity impacts of design, procurement, installation, and commissioning changes are reviewed and approved.
• Contribute to OT cybersecurity handover to operations, including procedures, access governance, incident response alignment, backup, recovery, and secure remote support models.

Minimum Requirements

• Bachelor’s degree in engineering (electronics & communication, or instrumentation / process automation background is preferred) or equivalent.
• Minimum 10 to 15 years’ experience in Operational Technology (OT), or related field with at least 3 years focused on designing, building or validating the design/implementation of the cybersecurity for industrial control systems and networks.
• Project implementation experience of Saudi cyber standards HCIS, NCA, or ISA 62443 Industry standards, specifications, regulations, best practices.
• Strong knowledge and understanding of control systems (SAS, SCADA/DCS/PLCs, etc.), including Wind Turbine systems, relevant protocols (Modbus, PROFINET, DNP3, IEC61850, etc.), key technologies including Firewalls, IDS, Anti‑Virus, Vulnerabilities assessments, etc. in the ICs/OT networks.
• OT/ICS cybersecurity relevant accreditations such as ISA/IEC62443, SANS or other internationally recognized certifications are preferred.
• Advanced skills in Microsoft Office tools such as Teams, SharePoint, Word, Excel, PowerPoint and Visio.
• Excellent communication skills and the ability to communicate appropriately at all levels of the organization; this includes written and verbal communications.

Founded in 1940, Air Products is a world‑leading industrial gases company and has a proud history of innovation, operational excellence, with an unwavering commitment to safety and environmental stewardship. Working together, we are taking our passion and diverse backgrounds forward to reimagine what’s possible and generate a cleaner future for our customers, our communities, and the world.