OT Cyber Security Infrastructure Specialist
Founded in 2006, Dexcent Inc. (Dexcent) is an engineering consulting firm that provides a range of specialized solutions for clients in a variety of industries throughout the world. Our professionals have modernized IT and OT engineering methodologies into comprehensive solutions, specializing in information analytics, cyber-security, infrastructure, and control systems engineering. As such, we pride ourselves on truly transforming industrial operations to optimize business performance and deliver bottom-line results.
The OT Cyber Security Infrastructure Specialist consults with clients to identify needs, compliance issues, and requirements for cyber security. They complete implementation, maintenance, troubleshooting and administration of supervisory control and data acquisition infrastructure. They regularly engage with clients and IT/OT professionals to support efficient and timely completion of projects.
Successful candidates can be based out of Houston or Austin, TX. Work will be primarily remote with visits to client offices and travel as required.
Position Duties and Responsibilities:
Review, enhance and implement network segmentation principles, access control mechanisms, intrusion detection and response systems, threat monitoring and reporting.
Conduct vulnerability assessments and remediation (research and patching).
Complete network architecture design and configuration of switches, routers, and firewalls.
In conjunction with the VP, Cyber Security, act as a consultant with clients to advance OT cyber security practices and controls.
Engage with clients to confirm project requirements against specifications, and best practices and ensure completion of projects.
Assist clients with planning, and support with ICS infrastructure design and, documentation activities.
Review various sources of documentation, existing design artifacts, management of change (MOC) records, asset management systems of record, logs, and asset monitoring to confirm how the client environment has been configured.
Prepare bulk updates to asset management systems according to SME direction for client execution.
Provide technical evaluation of supplier proposals and accept as fit for purpose supplied equipment or services.
Validate systems of record to ensure they accurately reflect OT systems and the assets within the environment.
Provide high-level KPI metrics to confirm asset count and accuracy of the information within OT systems.
Provide quality control (QC) testing support against design, installation, commissioning, documentation and change management activities.
Clearly and accurately document systems, processes, and procedures.
Maintain servers, virtualization infrastructure and network for multiple Industrial Control System networks.
Design, configure and support of virtualization infrastructure (VMWare, Hyper-V).
Maintain the usability of the virtual infrastructure in the cloud.
Conduct support and maintenance on all Servers running on Microsoft Windows
Develop and comply with OT cyber security policies and industry standards.
Participate in security audits and implement recommendations.
Perform Backup and disaster recovery of servers and third party provided Cyber Security software.
Install and maintain historical and real-time database systems.
Maintain, configure, and support end-point security solutions (anti-malware, threat detection, and response).
Support and administration for Active Directory and DNS.
Create scripts for OT projects using prominent scripting languages.
Maintain careful and diligent compliance with all relevant change management procedures.
A Bachelor’s Degree or a Master’s Degree in Computer Engineering, Electrical/Electronics Engineering, Computer Science, or related discipline, or equivalent experience.
Minimum 7+ years infrastructure support and maintenance experience.
Certifications that would be an asset include: Global Industrial Cyber Security Professional (GICSP), Certified Information Systems Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Systems Management (CISM).
Experience with: Industrial Control Systems (ICS)/industrial automation and control systems (IACs), supervisory control and data acquisition (SCADA) systems, process control systems (PCS), and/or distributed control systems (DCS) within the cyber security realm.
Field consulting experience is an asset.
System administrator experience with UNIX, Linux, and Windows Operating Systems is an asset.
Experience with ITSM tools (i.e. ServiceNow, Remedy, Atrium, CA Service Desk) is an asset.
Experience and understanding of regular expressions and scripting languages is an asset.
SANS, White/Black Hat, or other security training is desirable.
Ability to travel in North America.
Expert understanding of industrial networking concepts and the Purdue Model.
Working knowledge of multiple operating systems, security policies and terminology.
Knowledgeable of industrial Cyber Security frameworks including but not limited to NERC CIP, IAC/ISA 62443, NIST 800-82, TSA Pipeline Guidelines, etc.
Strong ability with UNIX, C, C++, Java, Python and Perl programming languages OR VB 6, C#.net, SQL/PLSQL, ASP.net, VBA, Access.
Network experience/certification with prominent industry vendors (Nozomi Networks, Cisco, Juniper, Palo-Alto, etc.).
Competency related to Real-Time SCADA Systems (OASyS, WonderWare, etc.), DCS, and Historians (such as OSI’s PI).
Familiarity with industrial hardware including but not limited to programmable logic controllers (PLCs)/programmable automation controllers (PACs), human machine interfaces (HMIs), intelligent electronic devices (IEDs), remote terminal units (RTUs), etc.
Knowledgeable of fundamental systems security.
Deal with concepts and complexity comfortably; described as intellectually sharp, capable, and agile.
Extremely professional with high integrity, ethics, confidentiality, and a strong work ethic.
Consistently able to handle multiple priorities, issues and high stress situations while maintaining confidence and a professional demeanor.
Excellent written and verbal communication and listening skills, enabling effective communication with clients, employees, vendors, and owners.
Strong customer service, organization, and time management skills.
Excellent troubleshooting and analytical skills coupled with ability to translate customer needs into technical solutions and recommendations.
Able to work within a team and when required independently with minimal supervision.
Proven proficiency with Excel, Word, PowerPoint, and Windows.
What We Offer
We recognize that people are our most important asset. We appreciate the diverse experience, knowledge, creativity, and personality that each person brings to our organization, our culture, and our success.
Health Spending Account