Senior Cybersecurity Engineer, Operational Technology
$153,404–$188,041 year
On-siteFort Collins, Colorado, United States
Job Summary
Design and implement secure OT cybersecurity controls for ICS, SCADA, and distributed energy resources while establishing network segmentation strategies using the ISA/IEC 62443 zone-and-conduit model. Conduct risk assessments, threat modeling, and vulnerability management to define security baselines and remediation plans that balance operational uptime with regulatory compliance under NERC CIP and NIST frameworks. Monitor OT environments through specialized detection tools, coordinate incident response with the OT MSSP, and develop playbooks for security events. Guide vendor integrations, manage asset visibility, and provide security architecture input for new generation assets like BESS and solar. Serve as the dedicated OT cybersecurity subject matter expert, translating regulatory requirements into practical controls and collaborating with engineering and operations teams to ensure alignment with enterprise objectives.
Required Qualifications
- Bachelor's degree in Cybersecurity, Computer Engineering, Electrical Engineering, or related field (or equivalent experience)
- Current valid driver's license and ability to remain insurable under the vehicle liability policy
- GICSP or GCIP (GIAC Critical Infrastructure Protection) certification or ability to earn within 12 months of hire
- 7–10 years of experience in cybersecurity, with exposure to OT/ICS environments
- Knowledge of industrial protocols (Modbus, DNP3, OPC, IEC 61850, etc.)
- Experience with OT security tools (e.g., Nozomi, Claroty, Dragos, Tenable.ot, Splunk)
- Experience with network segmentation, firewalls, and security architecture principles
- Practical understanding of how NERC CIP shapes OT controls, and the ability to work with compliance staff on the technical aspects
- Familiarity with threat detection, incident response, and security monitoring practices
Desired Qualifications
- Experience with certificate lifecycle and machine identity management in OT environments
- Experience with OT security platforms (e.g., Nozomi, Claroty, Dragos, Tenable.ot, Splunk)
- Familiarity with Palo Alto, Cisco, or similar network/security platforms
- Knowledge of cloud-to-plant integrations (IIoT)
- Experience securing remote access solutions (VPN, ZTNA)
- Experience with energy or utilities
- Background in energy, utilities, or critical infrastructure sectors
- CISSP or CISM
- GRID (GIAC Response and Industrial Defense)
- ISA/IEC 62443 certification (Cybersecurity Fundamentals Specialist or higher)
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.