ICS Security Engineer

ICS Security Engineer

The ICS Security Engineer reports to the Lead Control Systems Engineer, Process Services and is a technical expert for plant control systems networks and computing assets and ICS cybersecurity best practices. The position is responsible for hands-on troubleshooting, administrating, supporting, maintaining and improving control system networks, computers, applications, and cybersecurity initiatives including documentation. The Control Systems Engineer will provide support for development and execution of ongoing infrastructure and cybersecurity projects.

Knowledge: Understands all facets of ICS cybersecurity standards/best practices and systems administration in an operating facility. Knowledge of secure network design and architecture, active directory management and GPO development, vulnerability management, systems hardening, network and asset monitoring and troubleshooting and backup and recovery systems. Knowledge of Windows, Linux, VMWare, HyperV and Cisco platforms. Knowledge of cyber risk assessment methodology and incident response. Knowledge of Yokagawa/Client/Allen Bradley systems is a plus.

Responsibilities and Essential Duties: Support execution and development of infrastructure/cybersecurity projects and major capital projects. Serve as the Controls Systems expert. Monitors the health of control system software, hardware, and networks, troubleshoots hardware, software and network issues, performs hardware replacements, performs software corrections, and schedules upgrades as needed. Provide Controls Systems support to Maintenance and Operations groups to keep systems operational. Maintain, troubleshoot and improve existing cybersecurity management systems including endpoint security, patch management, logging, asset monitoring, access control, IDS, Active Directory Group Policies and administration, firewall rules, and network configuration management. Support development of cybersecurity framework including creation/revision of policies, guidelines, standards and procedures. Support development of practical ICS Asset Management KPIs and associated reporting Participate in ICS Security Incident Response Use sound engineering practices, plant standards, and specifications to ensure that documentation for the Controls Systems are maintained properly. Maintains the controls systems asset inventory and system architecture documentation. Evaluate database/automated solutions to keep these up to date Thoroughly understand the technical Management of Change (MOC) process and utilize it in support of capital projects and routine facility changes. Participate in Pre Startup Safety Reviews (PSSR). Support development of risk assessment and cybersecurity Management of Change process. Develop or modify complex control schemes and logic for routine facility changes and for capital and process optimization projects based on Process Engineer's objectives. Participate in regulatory agency audits. Develop design basis, preliminary estimates, and schedules for project design scopes. Work with multidisciplinary Technical Services team to define problems, establish work scopes, prepare task budgets and schedules, plan work, provide technical direction, and report the work status to management. Reinforce safety and environmental awareness through frequent job observations and by interfacing with plant personnel. Work with Engineering and Construction department to provide support and assure O & M interests are represented on major projects. Participates in Controls Systems factory acceptance tests (FATs), and site acceptance tests (SATs). Interact with and support IT, Technology Security, Regulatory Affairs, and other departments as required.

Qualifications (Education, Experience and Skills): Education and Certifications: Bachelor degree in Electrical Engineering or Computer Engineering preferred. Computer Science or Information Systems or DoD background may be considered with adequate experience in operating industrial/critical infrastructure environment. A Professional Engineer's (PE) License is a plus. Security Certifications (GISCP, ISA/IEC 62443 Cybersecurity Expert, CISSP, GICSP, CCNA) is a plus Experience: Seven (7) to Ten (10) years hands-on experience as a Control Systems Engineer or ICS Cybersecurity Professional. Recent experience with an operating Client facility is preferred, however, petrochemical, NGL, cryogenic natural gas processing, hydrocarbon processing operating facility, defense, or other critical infrastructure experience may be acceptable. Skills: Strong leadership and administrative abilities are required. An acute sensitivity to safety issues in a hazardous environment. Exceptional written, verbal and interpersonal communication skills. Ability to communicate effectively at all levels of an organization and with individuals and groups from different disciplines, industries and governmental agencies. Able to work with a culturally diverse group of technical individuals whose skills cover the range required to engineer, operate and maintain the Client terminal and Liquefaction production facilities. Possess the personality and ability to relate to and to establish a mutually respectful relationship with 1) management, 2) peers and 3) the various facility level workers (Plant Manager, plant supervision and plant workers) whom are all responsible for ensuring good operations. Organized, planning skills, able to manage multiple activities and programs in timely fashion and with a high degree of accuracy, able to meet work deadlines. Exceptional problem solving and analytical skills. Computer savvy including Microsoft Office Suite including Word, Excel, Access, Project and PowerPoint. Must maintain a Transportation Worker Identification Credential (TWIC) card in good standing status.

Direct Reports: No direct reports.

Freedom to Act: The Control Systems Engineer requires minimal supervision.

Work Conditions: Job is performed in an industrial plant environment. Occasionally, work may be performed from home, after normal work hours or on weekends. Limited travel required, as business conditions dictate. Subject to drug and alcohol testing, per applicable federal regulations or as required by Cheniere. While performing the duties of this job, the employee is often required to stand, walk, sit, climb stairs, work at height above ground on stairs and catwalks, balance, stoop, kneel, crouch, talk or hear, smell, type and write. Must be able to board a ship via a gangway, climb to the top of a tank (200+ steps), scale vertical steel ladder up to forty feet or more in height and lift and move objects weighting up to 30 pounds. While performing the duties of this job, the employee will work indoors and outdoors, and be exposed to year-around weather conditions, ocean environment, and noise. There is a considerable amount of outdoor activities involved. Specific vision abilities required include close vision, color vision, peripheral vision, depth perception and the ability to adjust focus. Required to pass regularly scheduled physical examinations mandated by regulatory authorities. Required to obtain mandated certification by attending Company-sponsored training in basic first aid, CPR, and Client firefighting.