ICS Cyber Security Engineer

CRH; Atlanta (GA); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Highly competitive base pay

Comprehensive medical and dental benefits

Group retirement savings program

Health and wellness programs

Job summary

CRH is searching for a Cyber Security Engineer based in Atlanta, GA to enhance IT security in their manufacturing facilities. The role focuses on developing cybersecurity measures ensuring operational safety and data integrity across critical industrial environments.

The ideal candidate will possess experience in IT/OT operations, strong incident response skills, and a relevant degree in engineering or cybersecurity. Competitive pay and benefits are offered in a supportive environment.

Qualifications

• 5+ years in IT/OT operations or industrial cybersecurity engineering.
• Exceptional documentation skills for translating security risks.
• Experience in heavy industry or process manufacturing.

Responsibilities

• Provide technical consultation for cybersecurity deployments.
• Operate and manage industrial security solutions.
• Identify and mitigate cybersecurity vulnerabilities safely.

Skills

IT/OT operations experience

Cybersecurity engineering

Communication skills

Incident response

Education

Bachelor's degree in Automation Engineering or similar

Tools

Windows Server

SIEM tools

Endpoint Protection

Job description

CRH is a leading global diversified building materials group, employing over 75,800 people at more than 3,160 locations in 29 countries. CRH is the leading building materials company in North America and the world. We manufacture and distribute a diverse range of superior building materials, products, and solutions, which are used extensively in construction projects of all sizes.

Job Summary

The Cyber Security Engineer plays a critical role in bridging the gap between corporate IT security and plant floor automation across our global building materials manufacturing facilities (Cement, Readymix, and Asphalt). This role is responsible for designing, deploying, and maintaining cybersecurity controls to ensure maximum operational availability, physical safety, and data integrity. The engineer will safeguard critical continuous-flow and batch-processing environments—such as high-temperature kilns, milling operations, and automated batching systems—against emerging industrial cyber threats.

Job Location

This role is based at our corporate office in the Perimeter area of Atlanta, GA – hybrid work schedule

Job Responsibilities

• Heavy Industrial Project Delivery: Provide technical consultation and hands‑on engineering support to divisional automation teams for OT cybersecurity deployments, line expansions, and plant modernization projects.
• Industrial Control Management: Operate and manage enterprise‑grade industrial security solutions, including network segmentation (Purdue Model), secure remote access for third‑party OEMs, endpoint protection, backup/recovery, and firmware/patch management.
• Vulnerability Mitigation: Identify, assess, and safely mitigate cybersecurity vulnerabilities in legacy PLCs, HMIs, and SCADA networks without disrupting critical manufacturing uptime or causing environmental control issues.
• Logistics & Supply Chain Security: Secure the integration points between OT plant networks, proprietary batching/mixing software, weighbridges, and bulk logistics/distribution interfaces.
• Monitoring & Incident Response: Maintain OT visibility platforms, construct relevant search queries within SIEM/log management tools, and participate in incident response planning tailored to physical process disruption and disaster recovery.
• Culture & Collaboration: Build strong relationships with site‑level electrical, instrumentation, and automation engineers, fostering a culture of cybersecurity awareness across highly distributed plant environments.

Job Requirements

• 5+ years of experience in IT/OT operations, system administration, or industrial cybersecurity engineering, preferably within heavy industry, process manufacturing, or mining/aggregates.
• Exceptional interpersonal and technical documentation skills, with the ability to translate complex security risks into concrete operational impact for plant floor personnel.
• Self‑motivated, methodical, and process‑driven with a proven track record of delivering complex infrastructure projects within tight operational shutdown/turnaround windows.
• Deep understanding of OT networks, architectures (Purdue Model), and typical cyber threats facing heavy industrial Cyber‑Physical Systems (CPS).
• Hands‑on experience with Windows Server/Workstations, industrial networking, virtualization hosting environments, and robust backup/disaster recovery solutions for plant networks.
• Proven experience with Cyber‑Physical Systems (CPS) visibility platforms (e.g., Claroty, Armis) and security tooling (Endpoint Protection, Network Security).
• Strong grasp of industrial incident response, change management, and exposure to log management/SIEM tools (e.g., Splunk) for threat detection.
• Direct familiarity with global industrial and IT security standards, with a strong emphasis on ISA/IEC 62443, supported by NIST CSF 2.0 and ISO 27001.
• Bachelor’s degree (or equivalent experience) in Automation Engineering, Electrical Engineering, Information Technology, Computer Science, or Industrial Cybersecurity.
• Preferred certifications include SANS/GIAC (GICSP, GRID, GCIP), ISA/IEC 62443 Expert, CISSP, or relevant network infrastructure credentials (e.g., CCNA).

What CRH Offers You

• Highly competitive base pay
• Comprehensive medical, dental and disability benefits programs
• Group retirement savings program
• Health and wellness programs
• An inclusive culture that values opportunity for growth, development, and internal promotion

About CRH

CRH has a long and proud heritage. We are a collection of hundreds of family businesses, regional companies and large enterprises that together form the CRH family. CRH operates in a decentralized, diversified structure that allows you to work in a small company environment while having the career opportunities of a large international organization.

CRH is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or any other characteristic protected under applicable federal, state, or local law.

AI tools may be used in certain stages of the employment lifecycle, such as candidate review; however, all final employment decisions will be made by a person.