Field Device Technician

Teraco; Gauteng; On-site; ZAR 400,000 - 700,000; Full time

Job summary

Une entreprise leader dans les technologies opérationnelles recherche un Field Device Technician. Le candidat sera responsable de la gestion sécurisée des dispositifs OT, de la mitigation des risques de cybersécurité et de l'alignement avec les normes internationales. Ce rôle comprend la surveillance des alertes de sécurité, la gestion des mises à jour et la documentation des incidents de sécurité.

Qualifications

• Expérience en gestion de la sécurité des appareils OT.
• Mise en œuvre des protocoles de communication sécurisés.
• Connaissance des normes de cybersécurité (IEC 62443, ISO27001, NIST CSF).

Responsibilities

• Gérer le cycle de vie des dispositifs OT, y compris le remplacement en fin de vie.
• Surveiller et gérer les alertes de cybersécurité.
• Maintenir une base de données d'actifs OT avec un suivi des vulnérabilités.

Skills

Cybersecurity

Risk Mitigation

Threat Intelligence

Lifecycle Management

Vulnerability Patching

Secure Protocol Configuration

Job description

The Field Device Technician is responsible for the secure operation and lifecycle management of all OT (Operational Technology) devices, with a strong focus on cybersecurity risk mitigation, threat intelligence integration, and compliance with industry standards. The role includes managing OT cyber hygiene, vulnerability patching, secure protocol configuration, and staying informed on current threat advisories and mitigations as issued by CISA (Cybersecurity and Infrastructure Security Agency). Technologies involved include Schneider EBO, PME, internally developed tools, and security platforms like Microsoft Defender for IoT, Claroty, and Dragos.

OBJECTIVES

MAIN FUNCTIONS OF THE JOB

• Manage the lifecycle of OT field devices (e.g. HVAC, power meters, fire detection, telemetry equipment), planning for and managing of end-of-life replacement projects.
• Manage the security of OT field devices (e.g. HVAC, power meters, fire detection, telemetry equipment), ensuring devices are hardened and securely configured.
• Monitor and action alerts from OT cybersecurity platforms and maintain integrations with external threat feeds including CISA vulnerability and advisory notifications :

Subscribe to and track CISA ICS Advisories, Known Exploited Vulnerabilities (KEV) Catalog, and Alerts (AA).

Translate relevant CISA guidance into action plans for patching, network segmentation, or threat mitigation.

Collaborate with security teams to assess organizational exposure to newly published threats.

• Maintain an accurate, regularly updated OT asset database with vulnerability metadata and firmware status mapped to threat advisories.
• Ensure secure communication protocols (BACnet / IP Secure, Modbus / TCP with authentication, MQTT with TLS, secure NTP) are correctly implemented and monitored.
• Validate firmware updates and patches against current CISA and OEM advisories before deployment; develop rollback plans as needed.
• Align OT operations with global cybersecurity standards (IEC 62443, ISO27001, NIST CSF) and maintain robust change control and documentation.
• Create, maintain, and share incident response documentation for OT-specific vulnerabilities, referencing external advisories like CISA's.