Senior Cybersecurity Engineer, Operational Technology

Recruitment notice: Platte River Power Authority does not accept unsolicited resumes from headhunters, recruitment agencies or fee-based placement services. No agency emails, calls, or solicitations to staff are accepted without a valid agreement. Any unsolicited resume submitted to staff will be considered property of Platte River Power Authority and with no obligation to pay any referral fees.

Job Summary

As a member of the cybersecurity team, this person is responsible for designing, implementing, and continuously improving cybersecurity controls that protect the organization's Operational Technology (OT) environments, including industrial control systems (ICS), SCADA, distributed energy resources (DER), and supporting infrastructure. The role also supports OT security monitoring, incident response, and vulnerability management while ensuring alignment with industry frameworks and regulatory requirements. Serves as Platte River's dedicated OT cybersecurity subject matter expert, and establishes security architecture, standards, risk management practices, and monitoring strategies that align with enterprise cybersecurity objectives while supporting operational safety, reliability, and regulatory compliance.

Essential duties and responsibilities

OT Security Design & Architecture

• Define and maintain OT cybersecurity standards, reference architectures, and secure design patterns
• Design and recommend cybersecurity controls for ICS, SCADA, DCS, and OT network environments
• Establish and guide implementation of network segmentation strategies between IT and OT environments using an ISA/IEC 62443 zone-and-conduit model with documented Security Level targets
• Ensure alignment between enterprise cybersecurity architecture and OT operational requirements
• Provide security guidance for emerging platforms such as DERMS, and IIoT
• Provide cybersecurity design input for new and changing generation assets (BESS, solar, wind, DER), in coordination with resource planning.

OT Risk Management & Governance

• Perform risk assessments, threat modeling, and security reviews of OT systems and architecture
• Identify and communicate OT cybersecurity risks to technical and business stakeholders
• Define security baselines and minimum control requirements for OT environments
• Support development and continuous improvement of OT cybersecurity policies, standards, and procedures
• Ensure all security recommendations account for safety, reliability, and operational constraints

Threat Detection & Incident Response

• Partner with OT teams to monitor OT environments using specialized detection tools; coordinate with the OT MSSP and enterprise IT security for monitoring coverage and escalation rather than a one-person 24/7 on-call model
• Establish and tune OT detection use cases and baselines in partnership with the OT MSSP
• Support investigation and response to OT-related security incidents and support OT incident reporting (CIP-008) in coordination with the CIP Compliance Analyst
• Contribute to development and testing of OT incident response playbooks and tabletop exercises
• Triage and act on OT threat-hunting findings and monitoring from the OT MSSP, and drive continuous monitoring improvements

Vulnerability & Patch Management

• Identify and assess vulnerabilities in OT systems, firmware, and applications
• Define risk-based remediation and mitigation strategies in coordination with OT stakeholders
• Guide patching approaches that balance cybersecurity risk with operational uptime
• Conduct risk assessments for legacy and unsupported systems and define compensating controls

Asset Visibility & Identity Management

• Develop and maintain visibility into OT assets, communications, and data flows
• Establish a roadmap for machine identity, certificate lifecycle, and trust relationships in OT environments
• Guide implementation of secure authentication mechanisms for users, devices, and remote access
• Build and maintain OT asset inventory and visibility, aligned to current CISA OT asset inventory guidance and supporting BES Cyber System identification (CIP-002)

Network Security & Monitoring

• Define OT network security requirements, including segmentation, zoning, and access controls
• Review and validate firewall rulesets and architecture for alignment with enterprise standards
• Analyze OT network traffic patterns and support anomaly detection efforts
• Partner with network and OT teams to strengthen monitoring coverage and visibility
• Select, deploy, and tune OT-aware monitoring tools (e.g., passive network monitoring, internal network security monitoring)

Compliance & Governance

• Ensure alignment with applicable frameworks and standards, including:
• NIST Cybersecurity Framework (CSF)
• NIST SP 800-82 (ICS Security)
• NERC CIP requirements (notably CIP-002, -005, -007, -010, and -011 as design constraints)
• ISA/IEC 62443 (zones and conduits, Security Level targets)
• Support internal and external audits, assessments, and evidence collection
• Translate regulatory requirements into practical, risk-based security controls
• Maintain documentation related to OT cybersecurity controls, risks, and exceptions

Vendor & Technology Integration

• Evaluate OT security technologies and recommend solutions that support operations and align with enterprise strategy.
• Provide cybersecurity guidance during deployment of OT systems and integrations
• Define and govern secure remote access requirements for vendors and third parties
• Assess vendor risk associated with OT systems, software, and managed services, contributing OT-side technical input to vendor security review and the CIP-013 supply-chain process (vendor security questionnaires, PSIRT/E-ISAC advisory monitoring, SBOM intake)

Training & Awareness

• Provide cybersecurity guidance and education to OT engineering and operations teams
• Promote awareness of secure practices for plant operators and technical staff
• Act as a liaison between enterprise cybersecurity and OT teams to improve collaboration and shared understanding

Knowledge, skills, and abilities

• Advanced 7-10 years of knowledge of Operational Technology (OT) environments, including ICS, SCADA, DCS, industrial networks, and related cybersecurity risks.
• Ability to design and implement secure OT architectures, including network segmentation, access controls, and secure remote access solutions.
• Knowledge of applicable OT cybersecurity frameworks, standards, and regulations, including NIST CSF, NIST SP 800-82, ISA/IEC 62443, and NERC CIP requirements.
• Skill in conducting risk assessments, threat modeling, vulnerability management, and developing risk-based remediation strategies.
• Ability to support OT threat detection, incident response, and security monitoring while balancing operational reliability and safety requirements.
• Skill in evaluating and integrating OT security technologies, vendors, and third-party solutions to strengthen cybersecurity posture.
• Ability to communicate cybersecurity risks and recommendations effectively and build collaborative relationships across cybersecurity, engineering, operations, and compliance teams. Advanced knowledge of Operational Technology (OT) environments, including ICS, SCADA, DCS, industrial networks, and related cybersecurity risks.
• Ability to design and implement secure OT architectures, including network segmentation, access controls, and secure remote access solutions.
• Knowledge of applicable OT cybersecurity frameworks, standards, and regulations, including NIST CSF, NIST SP 800-82, ISA/IEC 62443, and NERC CIP requirements.
• Skill in conducting risk assessments, threat modeling, vulnerability management, and developing risk-based remediation and mitigation strategies.
• Ability to support OT threat detection, incident response, and security monitoring while balancing operational reliability, safety, and business needs.
• Skill in assessing vendor and third-party cybersecurity risks, establishing secure technology integration requirements, and supporting supply chain security management.
• Ability to communicate cybersecurity risks and recommendations effectively and build collaborative relationships across cybersecurity, engineering, operations, compliance, vendors, and business stakeholders.

Qualifications

Required education and licenses

• Bachelor’s degree in Cybersecurity, Computer Engineering, Electrical Engineering, or related field (or equivalent experience)
• Current valid driver’s license and ability to remain insurable under the vehicle liability policy
• GICSP or GCIP (GIAC Critical Infrastructure Protection) certification or ability to earn within 12 months of hire

Required work experience

• 7–10 years of experience in cybersecurity, with exposure to OT/ICS environments
• Knowledge of industrial protocols (Modbus, DNP3, OPC, IEC 61850, etc.)
• Experience with OT security tools (e.g., Nozomi, Claroty, Dragos, Tenable.ot, Splunk)
• Experience with network segmentation, firewalls, and security architecture principles
• Practical understanding of how NERC CIP shapes OT controls, and the ability to work with compliance staff on the technical aspects
• Familiarity with threat detection, incident response, and security monitoring practices

Preferred education, licenses and work experience

• Experience with certificate lifecycle and machine identity management in OT environments
• Experience with OT security platforms (e.g., Nozomi, Claroty, Dragos, Tenable.ot, Splunk)
• Familiarity with Palo Alto, Cisco, or similar network/security platforms
• Knowledge of cloud-to-plant integrations (IIoT)
• Experience securing remote access solutions (VPN, ZTNA)
• Experience with energy or utilities
• Background in energy, utilities, or critical infrastructure sectors
• Preferred Certifications
  • CISSP or CISM
  • GRID (GIAC Response and Industrial Defense)
  • ISA/IEC 62443 certification (Cybersecurity Fundamentals Specialist or higher)

Physical demands

Minimal physical effort typically found in clerical work. Primarily sedentary, may occasionally lift and carry light objects. Minimal walking or standing as needed.

Hazards

Minimal exposure to hazards are typically found in general office environment where there is rarely to no exposure to injury or accident.

Work environment

Exposure to routine office noise and equipment

Pay

Salaries are paid bi-weekly and are annualized below for reference. Factors that may be used to determine actual salary include special skills, years of experience, education, and certifications.

Full range: $153,404 to $222,458

Hiring range: $153,404 to $188,041