Senior OT Cybersecurity Engineer

Expert Technology Services; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

Expert Technology Services seeks a Senior OT Cybersecurity Engineer to lead security for a critical infrastructure modernization project in Washington, DC. You will enhance OT/SCADA security, improve asset visibility, and enforce controls across complex environments while aligning with TSA directives and NIST 800-82.

Work in a SAFe/Agile team to translate security requirements into actionable user stories and drive secure remote access, patching, and incident response for vital transit and

Qualifications

• Experience securing OT/ICS environments, especially SCADA systems.
• Familiarity with TSA directives and NIST SP 800-82, IEC 62443.
• Ability to translate security requirements into user stories for Agile teams.

Responsibilities

• Architect, deploy, and manage security controls for OT/SCADA/ICs systems.
• Enhance network visibility, asset discovery, and vulnerability management.
• Implement network segmentation using the Purdue Model to separate IT and OT networks.
• Collaborate in SAFe/Agile team; participate in sprint planning and standups.
• Conduct risk assessments and ensure compliance with applicable standards.
• Establish secure remote access, centralized patching, and incident response processes.

Skills

OT Security

SCADA Security

NIST SP 800-82

IEC 62443

Purdue Model

Agile / SAFe

Threat Monitoring

Risk Assessment

Network Segmentation

Communication of security requirements

Tools

Claroty

Nozomi Networks

Dragos

Tenable.ot

Job description

Job Summary (List Format):

• Serve as Senior OT Cybersecurity Engineer for a critical infrastructure modernization project within a leading transportation organization in Washington, DC.
• Enhance network visibility, asset discovery, and implement security controls in complex OT, ICs, and SCADA environments.
• Operate in compliance with TSA Rail Security Directives and NIST cybersecurity standards.
• Architect, deploy, and manage security controls for OT, SCADA, and ICs systems.
• Execute network segmentation and enforce boundary controls using the Purdue Model to separate enterprise IT and OT networks.
• Implement and configure OT security tools (e.g., Claroty, Nozomi Networks, Dragos, Tenable.ot) for asset discovery, threat monitoring, and vulnerability management.
• Collaborate actively within a SAFe/Agile team, including participation in sprint planning, backlog grooming, and daily standups.
• Conduct technical risk assessments and ensure compliance with TSA, NIST SP 800-82, and IEC 62443 frameworks.
• Assist in establishing secure remote access, centralized patching, and incident response processes for critical infrastructure.
• Work with cross-functional teams to design and maintain robust security architectures for vital transit and wayside infrastructure.
• Communicate technical security requirements effectively and translate them into actionable user stories for Agile execution.