Operational Technology (OT) Cybersecurity Engineer

WSP in the U.S.; Raleigh (NC); On-site; USD 102,300 - 185,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Retirement savings

Job summary

WSP in the U.S. is seeking an experienced OT Cybersecurity Engineer to join their Transit & Rail practice in Raleigh, NC. This role involves conducting cybersecurity assessments for critical infrastructure, leading client conversations, and supporting the development of secure OT networks. Required qualifications include a Bachelor’s degree and 7-10 years of experience in OT cybersecurity, along with expertise in relevant standards. The position offers a salary range of $102,300-$185,000 and a comprehensive benefits package.

Qualifications

• 7–10+ years of OT cybersecurity experience.
• Hands-on experience with rail/transit OT systems including CBTC and SCADA.
• Professional certifications such as CISSP, GICSP, ISA/IEC, and/or CompTIA Security+.

Responsibilities

• Conduct OT cybersecurity risk assessments and vulnerability evaluations.
• Support secure OT system and network architecture development.
• Contribute to cybersecurity procurement documentation.

Skills

OT cybersecurity experience

Threat modeling

Communication skills

Vulnerability evaluations

Education

Bachelor’s degree in engineering, cybersecurity, or computer science

Tools

Nozomi

Claroty

Dragos

Job description

Overview

This opportunity is to join WSP’s Critical & Emerging Technology team within the national Transit & Rail practice. This role focuses on delivering OT cybersecurity engineering, assessments, supplier/OEM compliance reviews, and architecture support for transit and rail systems including CBTC, SCADA, PTC, traction power, fleet charging, and safety-critical infrastructure. It may include safeguarding systems such as signaling, SCADA, traction power, and fleet charging infrastructure, while championing adoption and strategies to future-proof our clients by testing and validating emerging technologies that enhance safety, reliability, and performance. The role requires deep cybersecurity expertise within the Transportation sector and the ability to lead client conversations about the future of transit. The position may be based out of any mutually agreed East Coast office with New York, NY as a preferred location.

Your Impact

Core Technical Responsibilities

• Conduct OT cybersecurity risk assessments, threat modeling, and vulnerability evaluations aligned with IEC 62443, TS 50701, NIST 800‑82/53, and relevant transit/rail standards.
• Review supplier/OEM cybersecurity documentation such as SSPs, IRAs, DCRAs, zoning/conduit models, SBOM/HBOM, and patch management plans.
• Support secure OT system and network architecture development including segmentation, DMZ design, boundary protection, and access control strategies.
• Assist with OT asset inventory, system baselining, and network visibility activities to improve cybersecurity situational awareness.
• Develop and recommend mitigation strategies, corrective actions, and cybersecurity controls for identified risks and vulnerabilities.
• Support cybersecurity testing, commissioning, and configuration validation for OT systems, including controllers, network devices, and field hardware.

Project Support Responsibilities

• Contribute to cybersecurity procurement documentation including scopes, requirements, and acceptance criteria.
• Support development of cybersecurity master plans, monitoring strategies, and operational security documentation.
• Participate in OT tabletop exercises and incident response activities in coordination with client teams.

Collaboration & Coordination

• Work collaboratively with engineering, systems integration, operations, and safety teams across project life cycles.
• Provide clear technical documentation and contribute to stakeholder communication as required.

Who You Are

Required Qualifications

• Bachelor’s degree in engineering, cybersecurity, computer science, or a related field.
• 7–10+ years of OT cybersecurity experience, including 3+ years in transit, rail, or critical infrastructure environments.
• Hands-on experience with rail/transit OT systems (CBTC, SCADA, PLCs, traction power, tunnel ventilation, fire/life safety, fleet charging, V2I/V2X, and related systems).
• Deep knowledge of cybersecurity standards including IEC 62443, TS50701, IEC 63452, NIST 800‑82/53, ISO frameworks, UNECE, TS, and APTA guidelines.
• Demonstrated expertise in threat modeling, penetration testing, and OT network security; experience securing OTA, remote diagnostics, and air-gapped environments.
• Familiarity with OT security tools and monitoring technologies (e.g., Nozomi, Claroty, Dragos, protocol analysis tools).
• Professional certifications such as CISSP, GICSP, ISA/IEC, and/or CompTIA Security+.
• Strong communication, stakeholder engagement, and technical writing skills for client-facing environments.
• Experience supporting cybersecurity-related compliance for U.S. transit regulatory bodies (FTA, FRA, TSA).
• Ability to work independently and collaboratively across disciplines, delivering cybersecurity solutions in complex operational environments.
• Understanding of OT logging, telemetry, and secure event collection requirements used to support monitoring, detection, and incident response.

Preferred Qualifications

• Master’s degree in systems engineering or cybersecurity.
• Demonstrated success in management consulting or advisory roles.
• Long-standing experience in the cybersecurity sector with a preference within the Transportation market.
• Ability to lead client-facing meetings and participate in industry committees.
• Deep experience with rail communications networks related to OT threats and vulnerabilities, including SCADA, PLCs, and industrial systems used in transit infrastructure.
• Examples and lessons learned from cybersecurity projects showing understanding of frameworks, threat detection, and prevention best practices.
• Knowledge of secure development lifecycle and supply-chain cybersecurity practices (e.g., IEC 62443‑4‑1, firmware integrity, component assurance).

WSP Benefits

WSP provides a comprehensive benefits package including medical, dental, vision, disability, life, retirement savings, paid time off, parental leave, and bereavement/voting/naturalization time as applicable.

Compensation

Expected Salary (all locations): $102,300-$185,000.

WSP USA reserves the right to modify the offered compensation and benefits based on factors including location, experience, and internal equity.

About WSP

WSP USA is the U.S. operating company of WSP, a global engineering and professional services firm. We design lasting solutions in buildings, transportation, energy, water and environment markets with over 15,000 employees in 300+ offices across the U.S.

WSP is an Equal Opportunity Employer. The selected candidate must be authorized to work in the United States.

Notice to Third Party Agencies: WSP does not accept unsolicited resumes from recruiters or staffing services. Unsolicited resumes will become the property of WSP.