Lead Engineer - OT Cybersecurity
At a Glance
- Category
- 🏗️ Construction & Engineering
- Level
- Senior
- Type
- Full-time
Are You Getting Through?
- Find out if CPX's ATS is filtering your CV
- Get AI-rewritten bullet points
- Download Gulf-ready CV
60 seconds. $5.88 one-time.
We are seeking highly skilled Engineers / / Senior Engineer / Lead Engineer to support the implementation of OT Cybersecurity solutions across utility environment and master control centers. The role involves hands-on deployment, configuration, and integration of cybersecurity technologies, infrastructure design, commissioning, and documentation. Candidates must have a strong background in operational technology (OT), instrumentation, and experience working in high and low voltage substations.
KEY RESPONSIBILITIES
- Design and develop High-Level Design (HLD) and Low-Level Design (LLD) documents for OT cybersecurity infrastructure.
- Perform OT Cybersecurity Gap assessment , risk assessments as per IEC 62443 , NIST and international standards .
- Perform cable routing and physical installation of network and security devices in substations and control centers.
- Deploy, configure, and integrate cybersecurity solutions including Nozomi Networks, Forescout, and Fortinet firewalls.
- Implement and manage Acronis backup solutions for critical OT systems.
- Design and implement a centralized DMZ architecture for secure data exchange between IT and OT networks.
- Review and validate electrical panel drawings and overall electrical design setups for compliance and integration.
- Conduct Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT) for all deployed systems.
- Prepare detailed technical reports, test plans, and documentation throughout the project lifecycle.
- Perform commissioning activities including system validation and operational readiness checks.
- Configure KVM switches for remote access and control of OT systems.
- Install and configure VMware ESXi on physical servers.
- Set up and segment virtual machines (VMs) according to network security policies.
- Create and maintain network architecture drawings using Microsoft Visio.
- Assign zones and conduits in accordance with ISA/IEC 62443 standards.
- Identify and document cable routes for all network and power connections.
- Ensure proper labeling and documentation of all installed components.
- Work with HMIs and gateways on Siemens, ABB, and Schneider Electric systems.
- Integrate and configure SICAM SCMS systems and other substation automation platforms.
- Apply instrumentation knowledge to configure and troubleshoot sensors, actuators, and control systems in substations.
- Collaborate with cross-functional teams including network engineers, cybersecurity analysts, and utility operations staff.
- Ensure compliance with industry standards and cybersecurity best practicesEngineering Design (HLD/LLD) & Drawing Development
- Review and validate Single Line Diagrams (SLDs), existing as-built drawings, and brownfield constraints; raise RFIs and propose constructible solutions.
- Validate panel drawings (GA, internal layout, wiring, interconnection, termination schedules, BOM) and ensure “as-built” updates post commissioning.
- OT Cybersecurity Infrastructure Deployment & Integration
- Implement and integrate OT cyber infrastructure components (e.g., industrial firewalls, switches, IDS sensors, secure remote access, logging collectors) according to approved LLD and standards.
- Support network cutovers, IP schemes, VLAN/VRF mapping, routing design inputs, and secure connectivity between substations and central platforms.
- Ensure installations meet required security baselines and customer utility practices (documentation, labeling, ports, hardening inputs).Testing, FAT/SAT, Commissioning & Acceptance
- Support/lead FAT preparation and execution: test procedures, inspection checklists, configuration verification, and evidence packs.
- Execute SAT / site commissioning, including pre-checks, power-up, connectivity validation, link testing, redundancy checks, punch lists/snags, and final handover.
- Coordinate with OEMs and customer operations for outage windows, access approvals, and acceptance criteria signoffs.HSE Documentation, Governance & OSHAD Compliance
- Prepare and maintain site HSE deliverables: Method Statements, Risk Assessments, Job Safety Analyses (JSA), lifting plans (if needed), toolbox talk records, and daily site safety documentation.
- Ensure compliance with Permit-to-Work systems, site inductions, emergency procedures, incident/near-miss reporting and stop-work authority as required
- Support OSHAD-aligned compliance expectations such as maintaining training records and competency evidence where required by the client/authority. Data Center / Central Cyber Infrastructure Exposure
- Support design and execution for central environments (SOC / control center / data center) including rack placement, structured cabling, patching, secure network build, and platform connectivity.
- Coordinate the infrastructure needs for central management/monitoring components and ensure readiness for integration testing and operations handover. (Comparable rack/device installation and safety controls are seen in data-center hub method statements.
- Project Delivery Support (Planning, Coordination, Reporting)
- Contribute to project planning: WBS inputs, site readiness checklists, resource plan, dependencies, and daily/weekly progress reporting.
- Support BOQ take-offs for panels/cabling/infrastructure and ensure materials readiness aligned with execution schedule.
- Coordinate with subcontractors for electrical/cabling works and ensure quality, safety, and documentation compliance
Skills/Certifications (Technical & Non-Technical)
Technical Skills / Core Competencies
- Demonstrated on-site execution in brownfield substations / utility environments (HV/LV interfaces awareness, safe work in operational sites).
- Strong capability in panel/cabinet build supervision, cabling, termination practices, labeling, testing, and as-built documentation.
- Proven ability to prepare HLD/LLD, implementable drawings, and engineering documentation packs.
- Understanding of OT network architecture principles (segmentation, zones/conducts), and integration constraints in utilities.
- Experience supporting FAT/SAT and commissioning activities with structured evidence and acceptance documentation.
- HSE / Compliance (Mandatory or Highly Preferred)
- Strong working knowledge of PTW systems, method statements and risk assessments for live utility sites
- Familiarity with UAE utility HSE expectations including OSHAD-aligned requirements and client safety governance.
- Utility Competency Certificate (e.g., Transco Competent Person or equivalent) OR demonstrable eligibility to obtain (substation experience, PTW exposure, toolbox talks, etc.).
- NEBOSH IGC (or equivalent) and OSHAD registration card
- First Aid / Fire Fighting certificates (as commonly requested for utility site roles).
- Strong ownership mindset, coordination with multiple stakeholders (client/OEM/subcontractors), and ability to execute under schedule constraints.
- High attention to detail in drawings, cabling schedules, labeling, and evidence packs.
- Clear communication and disciplined reporting for site progress, risks, and dependencies
Minimum Work Experience
- 7–12 years in cyber infrastructure / OT infrastructure / electrical-telecom execution in utilities, substations, rail, or industrial environments.
- Proven track record delivering brownfield site implementation including cabling/panels and commissioning support.
- Experience in data center infrastructure (rack/cabling/network build) supporting cyber platforms is a strong advantage.
Education
- Bachelor’s degree in electrical engineering / Electronics / Instrumentation / Telecom / Computer Engineering (or equivalent relevant discipline)..
- Relevant OT cybersecurity certifications (at least one):
- ISA 62443 , GICSP ,CISSP
Requirements
- •Strong background in operational technology (OT) and instrumentation
- •Experience working in high and low voltage substations
- •Knowledge of IEC 62443 and NIST standards
- •Experience with Siemens, ABB, and Schneider Electric systems
- •Ability to perform cable routing and physical installation of network devices
Responsibilities
- •Design and develop High-Level Design (HLD) and Low-Level Design (LLD) documents
- •Perform OT Cybersecurity Gap assessments and risk assessments
- •Deploy, configure, and integrate Nozomi Networks, Forescout, and Fortinet firewalls
- •Implement and manage Acronis backup solutions for critical OT systems
- •Design and implement centralized DMZ architecture for IT/OT data exchange
- •Conduct Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT)
- •Install and configure VMware ESXi on physical servers and segment VMs
- •Create and maintain network architecture drawings using Microsoft Visio
Related Jobs2 similar jobs
Browse Similar
- Find out if CPX's ATS is filtering your CV
- Get AI-rewritten bullet points
- Download Gulf-ready CV
60 seconds. $5.88 one-time.
CPX offers digital transformation and IT services. The company serves businesses looking to enhance their technological capabilities.