Senior Network and Cybersecurity Engineer

This is a senior technical engineering leadership role operating as the bridge between technical execution and project management. As a primary authority for HVDC Control and Protection you will contribute to the technical strategy for Network and Cybersecurity drive excellence in secure architectural design and mentor the engineering team. Working across large scale global projects involving multiple stakeholders you will lead the full lifecycle from requirements and design to implementation and development of digital control and Substation Automation Systems. You will serve as the go to expert ensuring that both internal projects and external stakeholder delivery meet the highest standards of innovation security reliability and quality.

Candidates who possess most of the experience outlined below and demonstrate strong motivation to develop expertise in the remaining areas are strongly encouraged to apply. We recognize the multifaceted nature of this role and value both proven experience and a genuine commitment to professional growth.

Leadership and Impact

• Technical Authority and Governance: Serve as the Technical Authority for Network and Cybersecurity domains. You will steer technical direction approve design choices and ensure alignment across global large-scale projects.
• Influential Leadership: Drive engineering excellence. You will act as a mentor fostering a culture of technical rigor and innovation and act as a coach for junior and mid-level engineers.
• Strategic Stakeholder Management: Translate complex technical strategies into clear business impacts for senior leadership and customers. You will advocate for the teams technical strategy and facilitate open dialogue between cross functional teams and external suppliers.
• Innovation Champion: Proactively identify project risks and technical debt driving timely resolution and implementing continuous improvements in engineering processes Network and Cybersecurity standards quality and best practices.
• Decision Making: Operate with autonomy. You are empowered to make high-stakes technical decisions and pull in specialized experts when necessary to ensure successful delivery.

Key Responsibilities

• Design and Architecture: Lead the end-to-end design of secure networks and communication architectures adhering to IECprinciples. Build functional infrastructure from the ground up (Networking virtualization server OS).
• Compliance and Lifecycle: Ensure adherence to Secure Deployment Guides and Security Assurance Plans. Manage vulnerability monitoring patch management and disaster recovery processes.
• Technical Oversight: Define IP address strategies perform substation level hardening and evaluate Network and Cybersecurity solutions from 3rd party suppliers.
• Tendering and Regulatory Support: Support bidding processes with knowledge of regulations such as EU NIS NERC and BDES; map requirements between varying Network and Cybersecurity standards.
• Operational Execution: Lead design configuration and testing to meet project budgets and schedules. Oversee FAT (Factory Acceptance Testing) and assist with on-site installation and commissioning of LAN networks.
• Documentation: Ensure all technical documentation aligns with engineering policies and procedures including appropriate confidentiality levels.

Qualifications and Experience

• Technical Foundation: Proven expertise in Industrial Networking Systems Architecture or Cybersecurity. You should possess relevant technical knowledge gained through either a degree in a related field OR equivalent industry recognized certifications (e.g. GICSP ISA/IEC 62443 Expert CCNP CCIE VCP).
• Domain Expertise: Experience in industrial control and protection system design specifically within Distributed Control Systems and Substation Automation (IEC 61850 environments).
• Cybersecurity Standards: Applied expertise in IEC 62443 standards (parts) and hands on experience with firewalls (Fortinet) IDS (Nozomi Radiflow) VPN/PKI and endpoint security.
• Networking: Excellent knowledge of Layer 2 and 3 protocols (IPv4 OSPF VRRP LACP SNMP SSH SFTP). Ability to build functional infrastructure from the ground up.
• Systems and Infrastructure: Experience with virtualization (VMware HyperV Proxmox) and Windows Server configuration.
• Industrial Protocols: Proficient in IEC 101/104 PTP OPC UA DNP3 Modbus TCP/IP and diagnostic debugging using Wireshark.
• Product Familiarity: Experience with GE Reason Westermo or Meinberg products is advantageous.