Control Systems Cybersecurity Senior Specialist

HDR is growing our Operational Technologies (OT) Cybersecurity Services program nationwide. Our Operational Technologies division is focused on assessing and developing cybersecurity protective measures for our clients. Our clients own and operate critical infrastructure in the Power, Water/Wastewater, Federal/DoD, Healthcare, Transportation, Oil and Gas and Chemical markets. HDR assesses and strengthens our clients' defenses against cyber threats to their critical operating and control systems. We have several projects that require qualified and experienced cybersecurity professionals.

About Us

At employee-owned HDR, we specialize in engineering, architecture, environmental and construction services. While we are most well-known for adding beauty and structure to communities through high-performance buildings and smart infrastructure, we provide much more than that. We create an unshakable foundation for progress because our multidisciplinary teams also include scientists, economists, builders, analysts and artists. That's why we believe diversity is our greatest strength. HDR is proud to be an equal opportunity workplace and an affirmative action employer.

Watch Our Story: ;br>
We believe that the way we work can add meaning and value to the world. That ideas inspire positive change. That coloring outside the lines can illuminate fresh perspectives. And that small details yield important realizations. Above all, we believe that collaboration is the best way forward.

Job Description:

HDR provides architectural and engineering design worldwide for critical infrastructure, commercial, industrial, and federal clients. Operational Technology (OT) systems are now commonly integrated into these facilities, and there is a significant need to secure these systems and networks to ensure reliable and safe operations.

Primary Duties:

• Lead cybersecurity teams and projects including design, planning, consulting and assessments
• Manage task deliverables, quality and budgets for multiple ongoing projects
• Provide leadership and mentoring of staff
• Provide cybersecurity, network and system specification design deliverables to address cybersecurity risks. Integrate security controls requirements necessary to mitigate to an acceptable level of risk through application of risk management framework concepts
• Participate in project meetings and provide specification deliverables in coordination with other HDR team designers, implementers, architects, and engineers
• Mentor internal and external clients on cybersecurity topics
• Participate in control systems master planning efforts
• Participate in construction administration services, including contractor submittal review and validation
• Lead OT network assessment and master planning tasks, including network mapping, asset inventories & vulnerability assessment.
• Serve as a cross-sector Operational Technology/Industrial Control Systems resource for HDR engineering project teams servicing critical infrastructure. This capability requires expertise in OT design, development, and deployment.

Potential Growth Duties:

• Maintain a working knowledge of secure networking standards to include NIST 800-53, NIST 800-82, ISA-62443, UFC-4-010-06, and others as required by the client
• Certifications Pursuit and Maintenance: Cybersecurity and IT network related
• Participate in pre-project system/network cybersecurity risk assessment
• Participate in and/or validate cybersecurity commissioning (CFAT/CSAT) or audits of ICS networks/systems
• Development of tools, processes, procedures and guidelines to support the development of growth within the Cybersecurity program

#LI-BK1

• Bachelor's Degree in a technical field similar to the following: Electrical Engineer, Automation Engineer, Computer Science, Computer Engineering, Cybersecurity, Electrical Engineering
• ship
• 10 years of experience in OT solutions design, development, deployment, and commissioning
  • OT network design experience and familiarity with the Purdue Model
  • Multiple equipment manufacturers and OT protocols
  • SCADA, PLC Programming, HMI, Operator Interface Terminals
• MS Word / Excel / Visio skills for project documentation and detailed network design (example work may be requested subject to confidentiality)
• Strong team player with excellent communication and documentation skills
• Ambition to learn and willingness to improvise/compromise based on client/project resources, limitations, and capabilities
• Prior operational technology experience within HDR's primary market sectors (critical infrastructure, healthcare, Federal/DoD, etc).
• Travel (~25%): US and International

Preferred:

• 10 years of experience working in critical infrastructure (Federal/DoD, Oil & Gas, Chemical, Water/Wastewater, Power Generation, etc.)
• 10 years of experience in network design and system configuration to include firewalls, ports, protocols, VLANs, VMs, and route configuration.
• Some network traffic analysis experience: Wireshark PCAPs, Intrusion Detection Systems (IDS)
• HVAC Control Systems experience to include BACnet and LonWorks protocols
• Multiple control system types (PLC based, DCS, BMS, and SIS)
• Cybersecurity Standards experience (ISA 62443, DoD RMF, ISO, NERC/FERC, etc.)
• Security , Network , CND, CISSP or GICSP (or ability to obtain matched with other network related certs)

Telecommuting is available as a flexible benefit to employees but this position is expected to come into the local office on a defined frequency.

We provide a comprehensive benefits package that promotes employee ownership, employee health, performance, and success, which includes medical, dental, vision, short and long-term disability, life insurance, an employee assistance program, paid time off, parental leave, paid holidays, 401(k) retirement savings plan with employer match, employee referral bonuses and tuition reimbursement. The expected compensation range depends upon skills, experience, education and geographical location.

The expected compensation range for this position in California is $116,886.00 - $174,570.00 annually.

The expected compensation range for this position in Washington is $122,199.00 - $174,570.00 annually.

Key words: Cybersecurity, ICS, OT, RMF, Industrial Control Systems, Networking, Firewalls, VM, IDS, Intrusion Detection System, PLC, BMS, BAS, BCS, UCS, UMCS, HMI, SCADA, Modbus, CIP, BACNet, LonWorks, TCP/IP

X