OT Engineer

OT Engineer

We are looking for an experienced Senior OT Cybersecurity Consultant to join NCC Group's fast-growing global OT Engineering practice focused on serving our critical national infrastructure clients across energy, water, manufacturing, rail etc. This is an opportunity to have an impact on the lives of millions of people every day through meaningful contribute directly to securing critical national infrastructure. This is a hands-on technical delivery role where you will have opportunities to work on OT cybersecurity architecture, design and engineering projects. You will work semi-autonomously, owning deliverables end-to-end while reporting to the Principal Consultant for technical guidance, assurance, and alignment. You will need to operate confidently in technical workshops with client OT engineers, IT teams, and technology stakeholders.

Key Responsibilities

Technical delivery

• Ability to work independently on defined tasks and deliverables semi-autonomously, with technical support from the Principal Consultant
• Ability to support technical client-facing workshops and meetings with client OT engineers, IT teams, and technology stakeholders
• Ability to understand and define OT network and security designs and architectures aligned with OT best-practice principles, IT/OT boundary design, access control models, etc.
• Ability to support evaluation and selection of technically appropriate hardware, software & interpret specifications to identify core technical requirements
• Ability to design with OT constraints front-of-mind: availability, safety, legacy system dependencies, change management realities, and the operational impact of security controls
• Responsibility to produce technical documentation, including low-level designs, network architecture diagrams, data flows, firewall rule specifications
• Ability to communicate design decisions, trade-offs, and dependencies clearly to both technical and non-technical audiences when required

Workstream and Project Delivery

• Ability to manage your own workload and task sequencing independently, escalating to the Principal Consultant for technical decisions and assurance checkpoints
• Ability to track progress against deliverable milestones and flag risks or blockers early, independently liaising with the project manager on these
• Ability to maintain clear documentation and audit trails across all artefacts
• Ability to work within various project management processes, including but not limited to AGILE/SCRUM

Practice Development

• Contribute to the development of reusable methodologies, templates and technical standards within the practice
• Support proposal development activities, where required
• Identify opportunities to improve project delivery and efficiency, where relevant
• Contribute to mentoring and upskilling more junior members of the team

Skills, Knowledge and Expertise

• Demonstrable experience of technical security delivery within the OT/ICS environments (ideally including network security, architecture designs in operational environments, going beyond assessment, policy, or governance work)
• Understanding the constraints of OT environments (availability-first priorities, legacy systems, change management limitations, safety-critical considerations, and the practical realities of working around live environments)
• Strong understanding of network segmentation, IT/OT boundary design, traffic flow analysis, and OT security architectures
• Familiarity with firewall design, switch configuration concepts, and virtualisation within OT or converged IT/OT environments
• Strong documentation skills: able to produce clear, auditable documents

Desirable:

• Demonstrable experience of delivering network security activities & architecture designs for OT/ICS environments
• Working knowledge of IEC62443 applied in real design delivery, particularly zones, conduits, and security levels as applied in real-world design engagements
• Familiarity with CIS and STIG policy standards
• Familiarity with OT technologies (HMI, PLC, RTU, DCS, SCADA etc.)
• Familiarity with common OT network protocols (IEC61850, DNP3, Modbus/TCP etc.) at a network architecture level, Gateways, brokers and messaging formats
• Experience with multiple firewall, switch, and virtualisation vendors in OT contexts (vendor-agnostic perspective preferred over single-vendor depth)
• Familiarity with NIST SP 800-82 and NIST 800-53 frameworks
• Experience in supporting procurement or vendor evaluation processes
• Awareness of zero-trust principles applied to OT network segmentation
• Exposure to software-defined segmentation approaches for OT networks
• OT-relevant certifications such as IEC 62443 Cybersecurity Expert, GICSP, GRID, or equivalent
• Exposure to the following sectors: Rail (TS50701), Automotive (ISO/SAE 21434), Renewables (Grid Connection Standards eg. G99), Manufacturing or other similar OT environments

Benefits

• Flexible Working: Balance your work and personal life with our flexible working options.
• Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave.
• Medicash & Critical Illness Scheme
• Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.
• Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.
• Green Car Scheme: Drive green and save money with our eco-friendly car scheme.
• Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme.
• Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.
• Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.

About NCC Group

We assess, develop and manage cyber threats across our increasingly connected society. We advise global technology, manufacturers, financial institutions, critical national infrastructure providers, retailers and governments on the best way to keep businesses, software and personal data safe. With our knowledge, experience and global footprint, we are best placed to help businesses identify, assess, mitigate & respond to the risks they face. We are passionate about making the Internet safer and revolutionising the way in which organisations think about cyber security. Headquartered in Manchester, UK, with over 35 offices across the world, NCC Group employs more than 2,000 people and is a trusted advisor to 15,000 clients worldwide. We review every application received and will get in touch if your skills and experience match what we're looking for. If you don't hear back from us within 10 days, please don't be too disappointed – we may keep your CV on our database for any future vacancies and we would encourage you to keep an eye on our career opportunities as there may be other suitable roles. If you do not want us to retain your details, you can utilise the Manage Your Data tool provided by Pinpoint or contact us directly at: View email address on click.appcast.io. All personal data is held in accordance with the NCC Group Privacy Notice. We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.

Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process.