Cyber Security Engineer

Title: Senior OT Cybersecurity Engineer Location: 100% Remote Duration: Long term contract 100% Remote - The Senior OT Cybersecurity Engineer position is fully remote. Job Description: Design, implement, integrate, and validate a complete OT Cybersecurity Infrastructure for railway and critical infrastructure projects. The role will have hands on engineering and implementation responsibility, ensuring that Cybersecurity platforms and controls are deployed according to international standards, project requirements, and local regulatory frameworks. Acts as the technical authority for security platforms, from core IT/OT infrastructure to SOC enabling technologies, supporting the full lifecycle from design through commissioning and operational handover. Defines reference architectures, platform designs, and integration patterns Personally implements, configures, and validates security platforms Deep understanding of operational constraints, availability, safety, and lifecycle issues Capable of designing secure solutions independently of specific vendors, while integrating commercial products effectively Design end to end OT cybersecurity infrastructure architectures aligned with IEC 62443 and TS 50701 principles Define technical standards, reference architectures, and design patterns for OT cybersecurity platforms. Ensure architectural consistency across multiple projects and geographic regions. Actively design, deploy, configure, and validate the following OT Cybersecurity Infrastructure components Functional tests for security controls Integration testing with OT subsystems Support vulnerability assessments, configuration reviews, and remediation activities. Provide technical input to Security Case and assurance documentation Required Skills/Knowledge 10+ years of experience in IT/OT Cybersecurity infrastructure, with demonstrated responsibility for architecture and deployment. CISSP and GICSP certifications Proven experience delivering cybersecurity infrastructures - Deep understanding of OT and IT network architectures. IEC 62443 (zones/conduits, SLs, system & component requirements) CLC/TS 50701 NIST 800 82 ISO 27001 / 27005 OT network design and segmentation Firewalls, WAF, Proxies NAC & RADIUS IAM / PAM / MFA NIDS & EDR SIEM architecture and integration Backup & Cyber Recovery Windows & Linux hardening Virtualization platforms (hypervisors) Highly Preferred Skills & Knowledge Railway or transportation OT environments SOC architecture and OT SOC onboarding Zero Trust adaptation for OT Scripting / automation (PowerShell, Python) Strong experience with: Firewalls, routing, switching, VLANs, VPNs Identity systems and access control models Linux and Windows server administration Virtualization platforms and data center design Ability to troubleshoot complex, multi vendor environments. Strong documentation and architectural reasoning skills Standards Compliance & Security Assurance Testing, Validation & Commissioning Education/Qualifications: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Telecommunications Engineering, Automation Engineering, Systems Engineering, or equivalent technical disciplines. Master’s degree in Cybersecurity, Information Assurance, or Systems Engineering is preferred.