Cybersecurity, OT-IT Security Consultant

• A relevant degree or equivalent experience is required.
• Bachelor's or Master's degree in Cybersecurity, Computer Science, Computer/Electrical Engineering, Information Systems, or a related field.
• 8+ years of experience in cybersecurity, with at least 3 years focused on OT/ICS environments or critical infrastructure sectors (water/wastewater, energy, manufacturing, or similar).
• Relevant certifications strongly preferred: GICSP, ISA/IEC 62443 Cybersecurity Expert, CISSP, GRID, or equivalent.

• Typically, a minimum of 8 years of relevant cyber security consultant experience is required.
• Relevant cyber security certifications (Security+, CISSP, GICSP, etc).
• Experience with on-premise and cloud-based system architecture is required.
• Previous experience in NIST or related security frameworks is required.

• Collaborate with interdisciplinary teams of environmental engineers, SCADA/controls engineers, data engineers, and software developers to assess, design, and implement cybersecurity solutions for client OT and IT environments.
• Lead cybersecurity risk and vulnerability assessments of industrial control systems (ICS), SCADA networks, and enterprise IT environments for water, wastewater, and environmental clients, aligned to NIST SP 800-82, NIST CSF, and IEC 62443.
• Design secure network architectures for converged IT/OT environments, including network segmentation, zone and conduit models, secure remote access, OT aware security gateways, and SOC integration strategies.
• Support clients in meeting regulatory and compliance requirements, including America's Water Infrastructure Act (AWIA) risk and resilience assessments, EPA cybersecurity guidance, and state level critical infrastructure requirements.
• Develop cybersecurity governance deliverables, including policies, incident response plans, system security plans, and roadmaps that balance operational reliability with security posture improvement.
• Evaluate and specify security technologies for OT environments (asset discovery and monitoring platforms, intrusion detection, firewalls, unidirectional gateways) with an understanding of the availability and safety constraints unique to industrial systems.
• Advise on secure design and deployment of emerging digital solutions — including cloud connected SCADA, IoT/edge sensing, digital twins, and AI/agentic systems — addressing risks such as API credential handling, data flow security, and prompt injection exposure.
• Support business development through proposal contributions, scopes of work, client presentations, and thought leadership on OT/IT convergence and critical infrastructure security.
• Stay up to date with emerging threats, technologies, and best practices in ICS/OT security, cloud security, and AI system security to drive continuous improvement.

Mentorship

• Provide mentorship, guidance, support, and knowledge-sharing to help less experienced team members develop their skills and grow within their roles.
• Advanced understanding of cyber security risks and mitigation solutions.
• Demonstrated competency in security solution architecture, design, and implementation.
• Advanced knowledge in contract review and security reviews.
• Proven ability to conduct complex and insightful security assessments.
• Strong knowledge in network infrastructure security (physical and virtual) solutions and tactics.
• Strong Informational Technology (IT), Operational Technology (OT), and Industrial Control Systems (ICS) knowledge.
• Highly adept in policy adherence and compliance in the context of cyber security.
• Excellent skills in business development support and strategic decision-making.
• OT/ICS Security: Deep working knowledge of SCADA, PLC/RTU, HMI, and historian architectures; familiarity with industrial protocols (Modbus, DNP3, OPC UA, EtherNet/IP) and their security limitations.
• Frameworks & Standards: Demonstrated experience applying NIST SP 800-82, NIST CSF, IEC 62443, and CIS Controls; familiarity with NIST AI RMF is a plus.
• Network Security: Strong understanding of network architecture and segmentation (Purdue Model), firewalls, VPNs, secure remote access, and OT network monitoring platforms (e.g., Claroty, Dragos, Nozomi).
• IT Security: Solid grounding in enterprise security domains, including identity and access management, endpoint protection, vulnerability management, and security operations/SIEM.
• Experience securing Azure environments, including Azure security services (Defender, Sentinel, Key Vault, Entra ID), DevSecOps practices, and secure CI/CD pipelines.
• Understanding of cloud-to-OT connectivity patterns and the security implications of hybrid architectures, edge compute, and IoT data pipelines.
• Water Sector: Experience with water/wastewater utility environments, AWIA compliance, and EPA/WaterISAC guidance is a strong plus.
• Assessments & Advisory: Experience delivering client facing cybersecurity assessments, gap analyses, and roadmaps in a consulting or professional services context.
• Strong problem solving skills and the ability to work in a collaborative, cross functional environment spanning engineering, operations, and IT stakeholders.
• Excellent communication skills to interact with technical and non-technical audiences, with the ability to translate cyber risk into terms that resonate with utility leadership and operations staff.
• A passion for staying updated with the latest trends, threats, and technologies in OT/IT security and critical infrastructure protection.