OT Cybersecurity Engineer

Bring your OT and power systems expertise to a phased encryption and key management programme, deploying HSMs as the cryptographic root of trust across control centres and substations.

Contract: 1 year

Location: Shiremoor, Tyne and Wear, UK

Working pattern: Hybrid, 2 to 3 days per week onsite

The Project

A power sector organisation is securing its OT environment through a three-phase programme covering HSM implementation, cryptography, PKI and certificate lifecycle management (CLM). Phase 1 focuses on deploying HSMs into live OT infrastructure. You will be the bridge between OT engineering and the IT security delivery team, shaping how security tooling lands safely in an operational grid environment.

Key Responsibilities

• Support HSM deployment into control centre and ruggedised substation environments

• Integrate the new HSM as the cryptographic root for existing or upgraded PKI

• Enable certificate issuance and renewal at device scale for IEDs and RTUs

• Advise on IT/OT boundary architecture, DMZ and zone/conduit design

• Advise on deployment timing and operational risk within OT change control

• Support POC testing of HSMs, validating performance, HA/failover and network behaviour

• Gather Phase 3 CLM requirements for renewal, revocation and automation

• Translate compliance obligations into technical constraints for security tooling

• Work on or near substation and control centre sites as required

• Commit to stage-gated involvement across all three phases, flexing around OT change windows

Technical Skills

• Power sector control systems: SCADA, DCS, RTUs, IEDs, HMIs

• Purdue Model (L0 to L3.5) segmentation and asset criticality

• DNP3, including SAv5 secure authentication

• IEC 61850 (GOOSE/MMS), Modbus and IEC 62351

• HSMs: network-attached and ruggedised/edge form factors

• PKI, CA architecture and certificate lifecycle management

• NERC CIP, NCSC CAF and IEC 62443-3-3 (SR requirements)

• OT change management, maintenance windows and safety cases

• Site safety training, PPE certification and inductions, or willingness to obtain them

• Strong communication across OT operations and IT security teams

Eligibility and Contact

UK right-to-work candidates only, including eligible dependant visa holders and those with ILR. Unfortunately, visa sponsorship or Skilled Worker visa support is not available.

To apply or find out more, contact [email protected]