Senior OT Cybersecurity Engineer - Onsite in DC (12-Month)

ZipStaff Inc.; Washington (District of Columbia); On-site; USD 110,000 - 165,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

401(k) + 401(k) matching

Paid time off

Referral Program

Job summary

ZipStaff is hiring a Senior OT Cybersecurity Engineer for a major U.S. passenger rail operator in Washington, DC.

You will lead hands-on OT network segmentation, DMZ builds and hardening of OT/SCADA environments in line with TSA Security Directives. This onsite role requires deploying firewalls from Palo Alto and Cisco, creating secure boundary controls, and remediating vulnerabilities to meet NIST SP 800-82 and IEC 62443.

Qualifications

• 8+ years in cybersecurity or network engineering focused on OT, SCADA and IC or critical infrastructure.
• Hands-on design and deployment of network segmentation, firewalls, and DMZ architectures in operational networks.
• Deep knowledge of OT network protocols and industrial networking standards.

Responsibilities

• Implement network segmentation and secure DMZs isolating OT, SCADA and IC environments from enterprise IT.
• Deploy and configure firewalls, network security architecture and boundary controls across transit and fleet monitoring infrastructure.
• Remediate vulnerabilities to meet TSA Rail Security Directives, NIST SP 800-82 and IEC 62443.
• Secure network connectivity for fleet monitoring systems across transit and wayside assets.
• Collaborate with network engineering and deployment teams to hit infrastructure security milestones.
• Attend quarterly in-person PI planning sessions in the Northeast Corridor.

Skills

OT/SCADA security

Network segmentation

Firewall deployment

Industrial protocols

Threat remediation

Technical communication

SAFe / Scrum

Tools

Palo Alto

Cisco

Job description

ZipStaff is hiring a Senior OT Cybersecurity Engineer for a major U.S. passenger rail operator in Washington, DC.

You will lead hands-on OT network segmentation, DMZ builds and hardening of OT/SCADA environments in line with TSA Security Directives. This onsite role requires deploying firewalls from Palo Alto and Cisco, creating secure boundary controls, and remediating vulnerabilities to meet NIST SP 800-82 and IEC 62443.