Title: Senior OT Cybersecurity Engineer
Location: 100% Remote
Duration: Long term contract
100% Remote - The Senior OT Cybersecurity Engineer position is fully remote.
Job Description:
Design, implement, integrate, and validate a complete OT Cybersecurity Infrastructure for railway and critical infrastructure projects.
The role will have hands on engineering and implementation responsibility, ensuring that Cybersecurity platforms and controls are deployed according to international standards, project requirements, and local regulatory frameworks.
Acts as the technical authority for security platforms, from core IT/OT infrastructure to SOC enabling technologies, supporting the full lifecycle from design through commissioning and operational handover.
Defines reference architectures, platform designs, and integration patterns
Personally implements, configures, and validates security platforms
Deep understanding of operational constraints, availability, safety, and lifecycle issues
Capable of designing secure solutions independently of specific vendors, while integrating commercial products effectively Design end to end OT cybersecurity infrastructure architectures aligned with IEC 62443 and TS 50701 principles
Define technical standards, reference architectures, and design patterns for OT cybersecurity platforms.
Ensure architectural consistency across multiple projects and geographic regions.
Actively design, deploy, configure, and validate the following OT Cybersecurity Infrastructure components
Functional tests for security controls
Integration testing with OT subsystems
Support vulnerability assessments, configuration reviews, and remediation activities.
Provide technical input to Security Case and assurance documentation
Required Skills/Knowledge
10+ years of experience in IT/OT Cybersecurity infrastructure, with demonstrated responsibility for architecture and deployment.
CISSP and GICSP certifications
Proven experience delivering cybersecurity infrastructures - Deep understanding of OT and IT network architectures.
IEC 62443 (zones/conduits, SLs, system & component requirements)
CLC/TS 50701
NIST 800 82
ISO 27001 / 27005
OT network design and segmentation
Firewalls, WAF, Proxies
NAC & RADIUS
IAM / PAM / MFA
NIDS & EDR
SIEM architecture and integration
Backup & Cyber Recovery
Windows & Linux hardening
Virtualization platforms (hypervisors)
Highly Preferred Skills & Knowledge
Railway or transportation OT environments
SOC architecture and OT SOC onboarding
Zero Trust adaptation for OT
Scripting / automation (PowerShell, Python)
Strong experience with:
Firewalls, routing, switching, VLANs, VPNs
Identity systems and access control models
Linux and Windows server administration
Virtualization platforms and data center design
Ability to troubleshoot complex, multi vendor environments.
Strong documentation and architectural reasoning skills
Standards Compliance & Security Assurance
Testing, Validation & Commissioning
Education/Qualifications:
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Telecommunications Engineering, Automation Engineering, Systems Engineering, or equivalent technical disciplines.
Master’s degree in Cybersecurity, Information Assurance, or Systems Engineering is preferred.