Engineer III, OT/ICS Cybersecurity & Controls (Cybersecurity)

Location: US Remote-USA; Heathrow, Florida / Remote or Hybrid. Hybrid work may require 2–3 days per week in the Lake Mary, FL office. Travel up to 20%, including occasional international travel, is required for BESS commissioning and site support.

Company

Develops integrated clean-energy technology and digital solutions for utility-scale solar, energy storage, and critical power infrastructure.

What you will do

• Design, configure, and maintain segmented OT network architectures for BESS sites, including managed Layer 2/3 switches, VLANs, routing, firewalls, ACLs, NAT, and VPNs.
• Administer the Ignition SCADA/HMI platform, including Gateway configuration, tags, alarming, security roles, and Python/Jython scripting.
• Deploy and tune SIEM platforms such as Splunk or Microsoft Sentinel, building detections, dashboards, and alerting for OT and adjacent IT systems.
• Maintain Azure networking, security, and identity architecture for cloud-connected CMS/SCADA applications.
• Conduct risk assessments, vulnerability scans, compliance audits, incident-response planning, and disaster-recovery exercises.
• Support commissioning and operations, advise leadership on OT/ICS security strategy, and mentor junior engineers.

Requirements

• Bachelor’s degree in cybersecurity, computer engineering, electrical engineering, computer science, or a related field, with at least five years of OT/ICS or IT network security experience.
• Hands-on experience configuring and troubleshooting managed switches and firewalls in production or industrial environments.
• Experience with SCADA/HMI platforms, preferably Ignition, and with SIEM deployment, tuning, or monitoring.
• Working knowledge of NERC CIP, IEC 62443, and NIST 800-82/800-53 requirements and compliance documentation.
• Experience with Azure networking, security, and identity services, plus Modbus and/or OPC-UA industrial protocols.
• Ability to work independently in the field during commissioning and to travel up to 20% of the time.

Nice to have

• Experience with BESS, PV, inverter-based technology, or Container Management Systems.
• Knowledge of Linux administration, MQTT-SpB, IEC 61850, Python or PowerShell automation, and vulnerability-scanning tools.
• Certifications such as CISSP, GICSP, CCNA/CCNP Security, Security+, Azure Security Engineer Associate, or Certified SCADA Security Architect.

Culture & Benefits

• Work in a collaborative environment focused on innovation, integrity, accountability, and customer partnership.
• Remote or hybrid work options are available depending on the situation.
• Office work is based in a climate-controlled environment with access to a Diagnostics Operations Center and SCADA provisioning room.
• Employer-provided PPE is available for operational site visits.
• Work with global teams supporting clean-energy infrastructure and the energy transition.