ICS Cyber Security Engineer

Oldcastle Payroll, Inc in; Atlanta (GA); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical & dental benefits

Disability benefits

Retirement savings program

Wellness programs

Career growth

Job summary

CRH in Atlanta is seeking a Cyber Security Engineer to bridge IT security with plant-floor automation across our cement, readymix, and asphalt facilities. You will design, deploy, and maintain cybersecurity controls to maximize uptime, safety, and data integrity in critical manufacturing environments.

The role requires 5+ years in IT/OT security, strong documentation, and deep knowledge of OT networks (Purdue Model), ISA/IEC 62443, and CPS visibility tools such as Claroty/Armis, along with SIEM

Qualifications

• Bachelor's degree (or equivalent) in Automation Engineering, Electrical Engineering, Information Technology, Computer Science, or Industrial Cybersecurity.
• Extensive knowledge of OT networks, Purdue Model, and control system security.
• Hands-on experience with CPS visibility tools and security tooling in industrial settings.
• Experience with Windows Server/Workstations, virtualization, and backup/recovery in plant networks.
• Familiarity with ISA/IEC 62443, NIST CSF 2.0, ISO 27001.

Responsibilities

• Lead OT cybersecurity deployments for plant modernization and line expansions.
• Manage industrial security solutions including network segmentation and secure remote access.
• Identify and mitigate vulnerabilities in legacy PLCs, HMIs, and SCADA without impacting uptime.
• Secure integration points between OT networks and logistics interfaces.
• Maintain OT visibility platforms and contribute to incident response planning.
• Collaborate with site engineers to promote cybersecurity awareness across plant environments.

Skills

OT cybersecurity

Industrial networks (Purdue Model)

SIEM (Splunk)

CPS visibility tools

Endpoint protection

Incident response

Networking & security

Education

Bachelor's degree in Automation/Electrical Engineering or IT/CS

Tools

Claroty

Armis

Splunk

CCNA / network credentials

Job description

CRH is a leading global diversified building materials group, employing over 75,800 people at more than 3,160 locations in 29 countries. CRH is the leading building materials company in North America and the world. We manufacture and distribute a diverse range of superior building materials, products, and solutions, which are used extensively in construction projects of all sizes.

Job Summary

The Cyber Security Engineer plays a critical role in bridging the gap between corporate IT security and plant floor automation across our global building materials manufacturing facilities (Cement, Readymix, and Asphalt). This role is responsible for designing, deploying, and maintaining cybersecurity controls to ensure maximum operational availability, physical safety, and data integrity. The engineer will safeguard critical continuous-flow and batch-processing environments-such as high-temperature kilns, milling operations, and automated batching systems-against emerging industrial cyber threats.

Job Location

This role is based at our corporate office in the Perimeter area of Atlanta, GA - hybrid work schedule

Job Responsibilities

• Heavy Industrial Project Delivery: Provide technical consultation and hands‑on engineering support to divisional automation teams for OT cybersecurity deployments, line expansions, and plant modernization projects.
• Industrial Control Management: Operate and manage enterprise‑grade industrial security solutions, including network segmentation (Purdue Model), secure remote access for third‑party OEMs, endpoint protection, backup/recovery, and firmware/patch management.
• Vulnerability Mitigation: Identify, assess, and safely mitigate cybersecurity vulnerabilities in legacy PLCs, HMIs, and SCADA networks without disrupting critical manufacturing uptime or causing environmental control issues.
• Logistics & Supply Chain Security: Secure the integration points between OT plant networks, proprietary batching/mixing software, weighbridges, and bulk logistics/distribution interfaces.
• Monitoring & Incident Response: Maintain OT visibility platforms, construct relevant search queries within SIEM/log management tools, and participate in incident response planning tailored to physical process disruption and disaster recovery.
• Culture & Collaboration: Build strong relationships with site‑level electrical, instrumentation, and automation engineers, fostering a culture of cybersecurity awareness across highly distributed plant environments.

Job Requirements

• 5+ years of experience in IT/OT operations, system administration, or industrial cybersecurity engineering, preferably within heavy industry, process manufacturing, or mining/aggregates.
• Exceptional interpersonal and technical documentation skills, with the ability to translate complex security risks into concrete operational impact for plant floor personnel.
• Self‑motivated, methodical, and process‑driven with a proven track record of delivering complex infrastructure projects within tight operational shutdown/turnaround windows.
• Deep understanding of OT networks, architectures (Purdue Model), and typical cyber threats facing heavy industrial Cyber‑Physical Systems (CPS).
• Hands‑on experience with Windows Server/Workstations, industrial networking, virtualization hosting environments, and robust backup/disaster recovery solutions for plant networks.
• Proven experience with Cyber‑Physical Systems (CPS) visibility platforms (e.g., Claroty, Armis) and security tooling (Endpoint Protection, Network Security).
• Strong grasp of industrial incident response, change management, and exposure to log management/SIEM tools (e.g., Splunk) for threat detection.
• Direct familiarity with global industrial and IT security standards, with a strong emphasis on ISA/IEC 62443, supported by NIST CSF 2.0 and ISO 27001.
• Bachelor's degree (or equivalent experience) in Automation Engineering, Electrical Engineering, Information Technology, Computer Science, or Industrial Cybersecurity.
• Preferred certifications include SANS/GIAC (GICSP, GRID, GCIP), ISA/IEC 62443 Expert, CISSP, or relevant network infrastructure credentials (e.g., CCNA).

What CRH Offers You

• Highly competitive base pay
• Comprehensive medical, dental and disability benefits programs
• Group retirement savings program
• Health and wellness programs
• An inclusive culture that values opportunity for growth, development, and internal promotion

About CRH

CRH has a long and proud heritage. We are a collection of hundreds of family businesses, regional companies and large enterprises that together form the CRH family. CRH operates in a decentralized, diversified structure that allows you to work in a small company environment while having the career opportunities of a large international organization.

CRH is an affirmative Action and Equal Opportunity Employer.

EOE/Vet/Disability

CRH is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or any other characteristic protected under applicable federal, state, or local law.

AI tools may be used in certain stages of the employment lifecycle, such as candidate review; however, all final employment decisions will be made by a person.