Cyber Security Engineer

ACL Digital; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Remote work

Job summary

ACL Digital seeks a Senior OT Cybersecurity Engineer to design and deploy an end-to-end OT security infrastructure for railway and critical infrastructure. You will implement security controls, validate architectures, and ensure compliance with IEC 62443 and TS 50701 across global projects.

You will lead hands-on engineering, collaborate with multi-disciplinary teams, and advance SOC-ready platforms while addressing availability, safety, and lifecycle considerations in a fully remote role.

Qualifications

• 10+ years in IT/OT cybersecurity infrastructure with architecture and deployment responsibility.
• CISSP and GICSP certifications.
• Proven delivery of cybersecurity infrastructures with OT/IT network expertise.
• CLC/TS 50701 knowledge.
• NIST 800-82 knowledge.
• ISO 27001/27005 knowledge.
• OT network design and segmentation.

Responsibilities

• Define reference architectures, platform designs, and integration patterns for OT cybersecurity.
• Implement, configure, and validate security platforms across projects.
• Ensure security platforms meet regulatory standards and project requirements.
• Support vulnerability assessments, configuration reviews, and remediation.
• Provide technical input to Security Case and assurance documents.

Skills

OT/IT security

CISSP

GICSP

IEC 62443

NIST 800-82

IAM/PAM/MFA

SIEM

Firewall/VPN

Linux/Windows

Vendor-neutral design

Education

Bachelor in Cybersecurity

Master preferred

Job description

100% Remote - The Senior OT Cybersecurity Engineer position is fully remote.

Job Description:

Design, implement, integrate, and validate a complete OT Cybersecurity Infrastructure for railway and critical infrastructure projects.

The role will have hands on engineering and implementation responsibility, ensuring that Cybersecurity platforms and controls are deployed according to international standards, project requirements, and local regulatory frameworks.

Acts as the technical authority for security platforms, from core IT/OT infrastructure to SOC enabling technologies, supporting the full lifecycle from design through commissioning and operational handover.

• Defines reference architectures, platform designs, and integration patterns
• Personally implements, configures, and validates security platforms
• Deep understanding of operational constraints, availability, safety, and lifecycle issues
• Capable of designing secure solutions independently of specific vendors, while integrating commercial products effectively Design end to end OT cybersecurity infrastructure architectures aligned with IEC 62443 and TS 50701 principles
• Define technical standards, reference architectures, and design patterns for OT cybersecurity platforms.
• Ensure architectural consistency across multiple projects and geographic regions.
• Actively design, deploy, configure, and validate the following OT Cybersecurity Infrastructure components
• Functional tests for security controls
• Integration testing with OT subsystems
• Support vulnerability assessments, configuration reviews, and remediation activities.
• Provide technical input to Security Case and assurance documentation

Required Skills/Knowledge

• 10+ years of experience in IT/OT Cybersecurity infrastructure, with demonstrated responsibility for architecture and deployment.
• CISSP and GICSP certifications
• Proven experience delivering cybersecurity infrastructures - Deep understanding of OT and IT network architectures.
• CLC/TS 50701
• NIST 800 82
• ISO 27001 / 27005
• OT network design and segmentation
• Firewalls, WAF, Proxies
• IAM / PAM / MFA
• NIDS & EDR
• SIEM architecture and integration
• Backup & Cyber Recovery

Highly Preferred Skills & Knowledge

• Railway or transportation OT environments
• SOC architecture and OT SOC onboarding
• Zero Trust adaptation for OT

Strong experience with:

• Firewalls, routing, switching, VLANs, VPNs
• Identity systems and access control models
• Linux and Windows server administration
• Virtualization platforms and data center design
• Ability to troubleshoot complex, multi vendor environments.
• Strong documentation and architectural reasoning skills
• Standards Compliance & Security Assurance

Education/Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Telecommunications Engineering, Automation Engineering, Systems Engineering, or equivalent technical disciplines.
• Master’s degree in Cybersecurity, Information Assurance, or Systems Engineering is preferred.