Summary
Stantec is hiring an OT Cybersecurity Engineer for a 6-month contract in Abu Dhabi. The role leads cybersecurity reviews and coordination for water network and Master Control Centre OT projects, including assessment of network architectures, security products, policies, and controls. The engineer will support risk assessments, design workshops, vendor and client coordination, cybersecurity testing at FAT locations, and construction and commissioning activities. Applicants need a B.E. or B.Tech. in a relevant engineering or cybersecurity field and at least 10 years of experience with OT cybersecurity systems; UAE or GCC experience is preferred.
The posting
As published on stantec.com. Pulled from the employer's site and shown as they wrote it.
Stantec is looking to hire a OT Cyber Security Engineer for 6 months for various projects in Abu Dhabi.
- Responsible for leading Overall OT/IT cyber security for major Master Control Centre/ Water Network OT projects.
- Responsible for reviewing Cyber Security Plan for the project for approval from Client.
- Reviewing network architectures and determining if good practices are being followed (e.g., the "zones & conduits" concept, proper network segmentation, use of Industrial DMZ, etc.); and providing recommendations to comply with applicable cybersecurity framework.
- Reviewing security products utilized (e.g., firewalls, IDS, IPS) and determining if they are configured properly.
- Monitor deployment of network infrastructure devices (e.g., switches, routers, etc.), security appliances (e.g., firewalls, IDS, etc.), and virtualization solutions
- Reviewing security policies, plans, and procedures; assessing network monitoring capabilities; analyzing system logs, security events, and packet captures to identify security threats; and providing recommendations to comply with applicable cybersecurity framework.
- Lead design reviews/workshops, reviewing/ recommending EPC contractor’s deliverables, Lead interfaces with various Package Vendors, prepare gap analysis against the project requirements for various control systems supplied by package vendors.
- Responsible for reviewing security products utilized (e.g., firewalls, IDS, IPS) and determining if the proposed configuration meets Project requirement and Industry standards.
- Responsible to review security policies, plans, and procedures; assessing network monitoring capabilities; analyzing system logs, security events, and packet captures to identify security threats; and providing recommendations and work with SCADA/ Control system contractor to comply with applicable cybersecurity framework.
- Review administrative, technical, and physical security controls proposed by SCADA/ Control system contractor and providing recommendations to mitigate the identified security risks.
- Participate and contribute to Cyber security workshops, vulnerability, and risk assessments with SCADA/ Control system contractor to identify security risks and threats (e.g., unsecure remote access points, suspicious remote connections, unauthorized devices on the network, etc.) and providing recommendation to remediate the identified issues, Prepare Report/Update/Maintain and coordinate with all parties to close out action points.
- Review/Comments contractor submitted detailed diagrams (e.g., network, cabling, server, rack, logical architecture, etc.), procedures, and plans (e.g., implementation, SAT, mitigation, etc.) as needed to support projects.
- Responsible to handle Technical Queries/issues from all stake holders, document review/approval of Automation & Package vendors, certification requirements if any, participate in regular meetings with vendors & Client
- Responsible to lead and participate in SCADA/ Control system contractor cyber security test at FAT locations, Responsible to accept the test and signoff reports.
- Responsible for coordination with client, subcontractors, other discipline engineers and Project team.
- Participating in cross-functional and inter-office meetings to provide design input to Engineering team.
- Proactively identify and mitigate technical risks during project stage.
- Travel to the client's site location as and when required.
- Support the construction, commissioning, and start-up activities, to ensure no delay.
Qualifications
B.E./ Tech. in IT/OT Cybersecurity/ Electrical/ Electronics/ Instrumentation engineering with 10+ years' experience in designing, testing, installing, testing & commissioning of OT cybersecurity systems in major water & wastewater projects or Master Control Centre/ Data Centre projects.
Experience within the UAE or GCC region will be preferred.
Location: Abu Dhabi, UAE