ICS/SCADA Cyber Engineer

Caplock Security LLC; Virginia (IL); On-site; USD 140,000 - 200,000; Full time

Job summary

Caplock Security is seeking a highly skilled ACS/SCADA Cyber Engineer to apply robust IT and OT security across critical infrastructure environments in the United States. You will implement NIST security controls, analyze exploitation methods, execute continuous monitoring, and manage the ACS acquisition lifecycle in alignment with federal standards.

This contingent role requires extensive control system security experience, DoD/Cybersecurity certifications, and an active secret clearance.

Qualifications

• Five years of experience in control system network and security design.
• Ten years in IT management (industry/government/consulting).
• Ten years of Certification and Accreditation (C&A) experience.
• IT project management experience using various Microsoft tools.
• Knowledge and experience in IT services and strategies.
• Experience with UCS/Utility Monitoring and Control System and related control systems.
• NIST C&A experience.
• DOD Cybersecurity experience.
• Active DOD SECRET Clearance and eligibility for Tier 3.
• GICSP certification.
• DoD 8140 / 8570 certified (e.g., Cloud+, GICSP, GSEC, Security+, SSCP, or greater).

Responsibilities

• IT/OT Security Integration: Apply core IT and OT cybersecurity strategies to protect mission-critical ICS and SCADA infrastructure.
• Compliance & Framework Alignment: Implement security controls aligned with NIST SP 800-82 guidelines.
• Continuous Monitoring & Threat Assessment: Execute monitoring and analyze exploitation techniques targeting ACS/SCADA components.
• Lifecycle Acquisition Management: Support security requirements throughout the ACS acquisition lifecycle.

Skills

Control systems security

NIST SP 800-82 knowledge

C&A experience

DOD cybersecurity

GICSP certification

DoD 8140 / 8570 certified

Microsoft tools for IT PM

IT/OT security integration

Job description

Job Description

Job Summary

Caplock Security is seeking a highly skilled ACS/SCADA Cyber Engineer to apply robust Information Technology (IT) and Operational Technology (OT) security strategies across specialized critical infrastructure environments. In this role, you will be responsible for implementing NIST security controls, analyzing potential exploitation methods, executing continuous monitoring strategies, and managing the ACS acquisition lifecycle in alignment with federal standards. This position is a contingent hire, with employment dependent upon the successful award of the contract.

Duties

• IT/OT Security Integration: Apply core IT and OT cybersecurity strategies to protect mission-critical Industrial Control Systems and SCADA infrastructure.
• Compliance & Framework Alignment: Implement security controls and governance models strictly aligned with NIST Special Publication (SP) 800-82 guidelines.
• Continuous Monitoring & Threat Assessment: Execute continuous monitoring practices and analyze potential exploitation techniques and attack methods targeting ACS/SCADA components.
• Lifecycle Acquisition Management: Support and guide security requirements throughout the complete ACS acquisition lifecycle.

Qualifications

• Five (5) years of experience in control system network and security design.
• Ten (10) years of practical industry, government and/or consulting experience in information technology management.
• Ten (10) years of relevant Certification and Accreditation (C&A) experience
• IT project management experience using various Microsoft tools.
• Knowledge and experience in managing information technology services and strategies.
• Experience and broad knowledge of Utility Control System (UCS), Utility Monitoring and Control System (CS), Manufacturing and Distribution, and other types of control systems operating in different modes than ICs such as Emergency Management Systems, Public Safety Communication Systems utilizing system specific protocols, ports, and services.
• National Institute of Standards and Technology (NIST) C&A experience
• DOD Cybersecurity experience
• Clearance: Required to possess a DOD SECRET Clearance and be eligible for a minimum of Tier 3 (T3)
• Certification: Global Industrial Cyber Security Professional (GICSP)
• Additional Required Certification: DoD 8140 / 8570certified (e.g., Cloud+, GICSP, GSEC, Security+, SSCP, or greater)

Caplock Security is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

This position requires an active secret security clearance or the ability to obtain and maintain one. U.S. citizenship is required. Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.