OT Cybersecurity Advisor

OT Cybersecurity Advisor

Work with Us. Change the World.

At AECOM, we're delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world's trusted infrastructure consulting firm, partnering with clients to solve the world's most complex challenges and build legacies for future generations.

There has never been a better time to be at AECOM. With accelerating infrastructure investment worldwide, our services are in great demand. We invite you to bring your bold ideas and big dreams and become part of a global team of over 50,000 planners, designers, engineers, scientists, digital innovators, program and construction managers and other professionals delivering projects that create a positive and tangible impact around the world.

We're one global team driven by our common purpose to deliver a better world. Join us.

Job Description

AECOM is seeking an OT Cybersecurity Advisor to be based in our Arlington, VA office. This position will be an integral part of the OT Cybersecurity Team.

• Under direct supervision, provides analysis on projects. Executes work plans and task definition, participates in data collection.
• Participates in development of solutions to client problems with a focus on financial analysis and capital investment under the guidance of a more senior manager.
• Assigned as a consultant to a wide variety of areas.
• Provide network and system specification documentation deliverables to address cybersecurity vulnerabilities and the security controls necessary to mitigate the vulnerabilities to an acceptable level of risk through application of risk management framework concepts.
• Manage task deliverables, quality and budgets for multiple ongoing projects.
• Participate in project meetings and provide specification deliverables in coordination with designers, architects, and engineers.
• Participate in control systems master planning efforts.
• Participate in construction administration services, including contractor submittal review.
• Lead OT network assessment and master planning tasks, including network mapping and asset inventories.
• Serve as a OT Cybersecurity resource for engineering project teams servicing critical infrastructure. This capability requires expertise in OT design, development, and deployment.
• Participate in pre-project system/network cybersecurity risk assessment.
• Development of tools, processes, procedures, and guidelines to support the development of growth within the Cybersecurity discipline.

Qualifications

Minimum Requirements

• Bachelor's degree in a technical field similar to the following: Cybersecurity, Electrical Engineer, Automation Engineer, and Computer Engineering.
• CISSP and/or Security +.
• Due to the nature of the work, US Citizenship is required.
• Ability to obtain a security clearance is required.

Preferred Qualifications

• Experience in OT solutions design, development, deployment, and commissioning.
• OT network design experience and familiarity with DoD UFC and NIST RMF.
• SCADA, PLC Programming, HMI, Operator Interface Terminals.
• Experience working in critical infrastructure (Federal/DoD, Oil & Gas, Chemical, Water/Wastewater, Power Generation, etc.).
• Experience in network design and system configuration to include firewalls, ports, protocols, VLANs, VMs, and route configuration.
• Control Systems experience to include protocols.
• Multiple control system types (PLC based, DCS, BMS).
• Cybersecurity Standards experience (ISA 62443, DoD RMF, ISO, NERC/FERC, etc.).
• IAM/IAT Level certifications (CISSP, CySA, Security+) equivalent.
• MS Word / Excel / Visio skills for project documentation and detailed network design (example work may be requested subject to confidentiality).
• Strong team player with excellent communication and documentation skills.
• Ambition to learn and willingness to improvise/compromise based on client/project resources, limitations, and capabilities.
• Maintain a working knowledge of secure networking standards to include NIST 800-53, NIST 800-82, ISA-62443, UFC-4-010-06, and others as required by the client.