OT Systems & Cybersecurity Specialist

Cobb County-Marietta Water Authority; Marietta (GA); On-site; USD 95,000 - 125,000; Full time

Job summary

Cobb County-Marietta Water Authority is seeking an OT Systems & Cybersecurity Specialist to lead hands-on administration, security, and lifecycle management of OT computing systems supporting critical water infrastructure.

You will coordinate with IT, Security, SCADA, Engineering, and vendors to protect confidentiality, integrity, availability, and recoverability of OT systems while aligning with regulatory requirements and industry guidance.

Qualifications

• Bachelor's degree and 3+ years in systems administration, cybersecurity, OT/SCADA tech, or related field, or equivalent experience.
• Experience with Windows Server/Workstations, AD, DNS, and Microsoft technologies.
• Knowledge of OT/SCADA networks, HMIs, historians, and domain segmentation preferred.
• Certifications such as Security+, CySA+, Network+ or CCNA are a plus.

Responsibilities

• Administers Windows servers, workstations, VMs, applications, and SCADA OT environments; patches, upgrades, troubleshoots systems.
• Supports SCADA-related servers, historians, databases, HMIs, and engineering workstations with proper separation from process-control duties.
• Manages accounts, permissions, authentication, and access controls for OT systems.
• Maintains endpoint protection, vulnerability management, logging, and cybersecurity technologies in OT.
• Monitors performance, availability, and cybersecurity events; participates in incident response and post-event analysis.
• Coordinates vulnerability assessments, patching, and system hardening with operational constraints.
• Assists with OT cybersecurity policies, standards, and secure baselines in line with regulations.
• Participates in audits, risk assessments, tabletop exercises, and remediation for OT systems.
• Maintains OT inventories, configurations, and recovery documentation for resilience.
• Supports OT network segmentation, secure remote access, and trust boundaries.
• Evaluates vendor access, cybersecurity practices, and architecture changes for risks.
• Provides OT cybersecurity guidance and security awareness training.
• Monitors threats related to water utilities and industrial control systems; participates in threat-hunting.
• Coordinates during incidents with internal and external stakeholders.
• Develops and tests OT disaster recovery and business continuity plans.
• Reviews proposed technologies and participates in FAT/SAT and commissioning.
• Tracks OT cybersecurity metrics and supports continuous program improvement.
• Collaborates on physical security integration for OT assets.
• May require after-hours work and other duties as assigned.

Skills

Windows Server

Active Directory

Vulnerability management

EDR/anti-malware

SCADA/OT security

Network fundamentals

Incident response

Education

Bachelor's degree in Computer Science or related field

OT/SCADA or cybersecurity certifications preferred

Tools

Virtualization (VMware/Hyper-V)

Firewalls

Patch management

Job description

Job Summary

Under the direction of the Director of Technology, the OT Systems & Cybersecurity Specialist serves as a technical subject‑matter resource responsible for the hands‑on administration, security, reliability, resilience, and lifecycle management of Operational Technology (OT) computing systems supporting CCMWA’s critical water infrastructure. The position administers OT systems and cybersecurity technologies; supports the Authority’s OT cybersecurity program; and coordinates with Information Technology, Security, Operational Technology, SCADA, Engineering, Operations, vendors, and external partners to protect the confidentiality, integrity, availability, and recoverability of critical OT systems.

Under the direction of the Director of Technology, the OT Systems & Cybersecurity Specialist serves as a technical subject‑matter resource responsible for the hands‑on administration, security, reliability, resilience, and lifecycle management of Operational Technology (OT) computing systems supporting CCMWA’s critical water infrastructure. The position administers OT systems and cybersecurity technologies; supports the Authority’s OT cybersecurity program; and coordinates with Information Technology, Security, Operational Technology, SCADA, Engineering, Operations, vendors, and external partners to protect the confidentiality, integrity, availability, and recoverability of critical OT systems.

Description

Under the direction of the Director of Technology, the OT Systems & Cybersecurity Specialist serves as a technical subject‑matter resource responsible for the hands‑on administration, security, reliability, resilience, and lifecycle management of Operational Technology (OT) computing systems supporting CCMWA’s critical water infrastructure. The position administers OT systems and cybersecurity technologies; supports the Authority’s OT cybersecurity program; and coordinates with Information Technology, Security, Operational Technology, SCADA, Engineering, Operations, vendors, and external partners to protect the confidentiality, integrity, availability, and recoverability of critical OT systems.

Requirements

Essential Functions and Responsibilities

• Administers Windows servers, workstations, virtual machines, applications, and supporting infrastructure used by SCADA and other OT environments; installs, configures, patches, upgrades, and troubleshoots assigned systems.
• Supports SCADA-related application servers, historians, database servers, engineering workstations, HMIs, thin clients, and related computing platforms while maintaining appropriate separation from process-control and PLC programming responsibilities.
• Manages user and service accounts, permissions, authentication, group policies, privileged access, and other identity and access controls for assigned OT systems.
• Administers and maintains endpoint protection, EDR/anti-malware, application control, vulnerability management, logging, monitoring, and other cybersecurity technologies used within the OT environment.
• Monitors system performance, availability, hardware and application health, logs, and cybersecurity events; investigates suspicious activity and participates in incident response, containment, recovery, evidence preservation, post-event analysis, and corrective actions.
• Performs or coordinates vulnerability assessments, cybersecurity patching, system hardening, and risk-based remediation while accounting for operational availability, vendor requirements, and approved maintenance windows.
• Assists with the development, implementation, and maintenance of OT cybersecurity policies, standards, procedures, and secure configuration baselines in alignment with applicable regulatory requirements, industry frameworks, and guidance.
• Participates in internal and external cybersecurity audits, risk assessments, tabletop exercises, and remediation activities affecting OT systems.
• Maintains and validates OT hardware and software inventories, lifecycle records, system configurations, technical documentation, diagrams, recovery documentation, and secure configuration baselines to support cybersecurity, reliability, recovery, and lifecycle planning.
• Supports OT network segmentation, firewall controls, secure remote access, vendor access protections, and safeguards for IT/OT trust boundaries.
• Evaluates vendor remote access, cybersecurity practices, software updates, system integrations, and proposed architecture changes for potential cybersecurity and operational risks; coordinates technical support with vendors and system integrators.
• Provides OT cybersecurity guidance and assists with cybersecurity awareness and security best‑practice training for Operations, Engineering, Maintenance, and Technology personnel.
• Monitors cybersecurity threats and threat intelligence relevant to water utilities, industrial control systems, and critical infrastructure and participates in threat‑hunting activities within the OT environment.
• Coordinates with internal stakeholders, government agencies, cybersecurity partners, and vendors, as appropriate, during OT cybersecurity incidents and recovery activities.
• Supports the development, maintenance, and testing of OT disaster recovery, cyber recovery, business continuity, operational resilience plans, and recovery strategies for critical OT systems.
• Reviews proposed OT technologies, architectures, system modifications, and integrations for cybersecurity and operational impacts and participates in design reviews, factory acceptance testing (FAT), site acceptance testing (SAT), and commissioning activities as appropriate.
• Develops, tracks, and reports OT cybersecurity and system‑health metrics, including vulnerability status, patch compliance, cybersecurity events, and other key performance indicators; supports continuous improvement of the Authority’s OT cybersecurity program.
• Coordinates with Operations, Security, and Technology personnel to support physical security technologies and the integration of physical and cybersecurity controls protecting OT assets and facilities; maintains awareness of emerging technologies, threats, vulnerabilities, and industry practices; may require after‑hours/on‑call work and performs other related duties as assigned.

Minimum Qualifications (Education, Experience, Skills And Abilities)

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, Engineering Technology, or a related field and at least three years of progressively responsible experience in systems administration, cybersecurity, network administration, OT/SCADA technology, or a related field; or an equivalent combination of education, training, certifications, and experience which provides the requisite knowledge, skills, and abilities for this position.
• Requires a Georgia Driver’s License with a good driving record and must maintain a good driving record to continue employment with the Authority.
• Experience administering Windows Server and Windows workstation operating systems, Active Directory, Group Policy, DNS, and related Microsoft technologies.
• Experience with virtualization technologies, server/workstation hardware, backup and recovery, and troubleshooting hardware/software problems.
• Knowledge of network fundamentals including TCP/IP, LAN/WAN communications, VLANs, routing, switching, and firewalls.
• Experience with endpoint protection/EDR, vulnerability management, security monitoring, system hardening, identity/access management, and incident response.
• Knowledge of SCADA or Industrial Control System architecture, HMIs, historians, application servers, engineering workstations, and OT network segmentation is preferred.
• Experience supporting water/wastewater utilities, critical infrastructure, industrial control systems, manufacturing, energy, or a similar operational environment is preferred.
• CompTIA Security+, CySA+, Network+, Microsoft, Cisco CCNA, GICSP, ISA/IEC 62443, or comparable technical/security certification preferred.2

Work Environment

• Work is performed in office and technology environments and may also require work in treatment plants, pumping facilities, control rooms, equipment rooms, server rooms, and other operational facilities.
• While performing this job, the employee may work near moving mechanical parts and may occasionally work in a noisy environment.
• Because OT systems support critical water infrastructure, the employee may occasionally work outside normal business hours for maintenance, upgrades, emergency troubleshooting, cybersecurity incidents, or system recovery.

Physical Demands

• The employee is frequently required to stand, walk, sit, use hands to handle or feel objects, tools, or controls; reach with hands and arms; climb or balance; stoop, kneel, crouch or crawl; talk, hear, and see.
• The employee may lift up to 50 pounds occasionally, up to 20 pounds frequently, and up to 10 pounds constantly to move objects.
• Tasks may involve extended periods of time at a keyboard or workstation.

Management retains the discretion to add or change the duties of the position at any time.