Lead Network & Cyber Security Engineer
Stafford (Staffordshire) IT development
Job description
Job Description Summary
Become part of a winning team and help to deliver the Green Energy transition.
You will be part of a team that defines the substation LAN Networks and ensures Cybersecurity compliance for the HVDC Substation Automation Systems.
Lead the design of secure networks and Communication Architectures of the HVDC Control System from concept to commissioning based on the principles set out in IEC 62443-3-3.
You will be working on several large global projects involving several stakeholders and knowledge of various cybersecurity standards is essential.
Job Description
Responsibilities:
· Lead the design of secure networks and Communication Architectures of the HVDC Control System from concept to commissioning based on the principles set out in IEC 62443-3-3.
· Act as the point of contact for all matters related to cybersecurity and networking in a project environment. This includes evaluating the solutions of various 3rd party suppliers which interface to the control system.
· Support Tendering teams during the bidding process for any cybersecurity and networking related requirements from various customers - Knowledge of a range of Cybersecurity regulations such as EU NIS, NERC and BDES is essential.
· Ensures the Secure Deployment Guides for the HVDC Control System and 3rd party system interfaces are adhered to.
· Ensures the Security Assurance Plans are followed by all relevant project stakeholders during the complete project duration.
· Define IP address strategies for the complete control system.
· Able to perform hardening in a substation environment.
· Share engineering information and promote open dialogue.
· Ensure documentation of technical data generated for the assigned projects and/or tasks is in line with engineering policies and procedures.
· Map requirements between different cybersecurity standards.
· Analyse and evaluate different cybersecurity and networking solutions.
· Justify solution / analysis / evaluation in front of a customer and technical audience.
· Build functional infrastructure from the ground up (Networking, virtualization, and server operating system configuration).
· Knowledge of the process for monitoring vulnerability publications.
· To be familiar with the patch management process to correct vulnerabilities published.
· Knowledge of documentation to be provided with the associated level of confidentiality.
· Lead the design, configuration and testing required to deliver on time and within defined budgets.
· Follow the department’s standard design practices, engineering reviews and guidelines.
· Oversee the testing and FAT witnessing of the Control System.
· Assist site activities relevant to the installation and commissioning of the control system LAN network.
· Lead Network & Cybersecurity Engineer requirements.
Qualification & Experience
· Qualification in Communication engineering or related field.
· Familiarity with secure remote access architectures using VPN and PKI technologies.
· An excellent background in Distributed Control Systems / Substation Automation.
· Significant and demonstrated experience in designing and configuring Substation LAN’s especially within an IEC61850 environment
· Experience with one of GE Reason, Westermo, Meinberg products is advantageous.
Must have knowledge of:
· IEC 62443 standard, mainly parts 4-1, 4-2, 3-3 and 2-4.
· Virtualization platforms such as VMware, HyperV and Proxmox.
· Configuring server operating systems, i.e. Windows Server.
· Configuring next generation firewalls such as Fortinet.
· Intrusion Detection Systems such as Nozomi, Radiflow.
· Anti-malware, patch management and disaster recovery tools.
· Network monitoring and management.
· Standard cyber topics such as VPN technologies, Secure Network Access, Endpoint Security, and Network Infrastructure Protection.
· Network Security / Hardening and Cybersecurity best practices.
· Excellent knowledge of commonly used protocols such as OSPF, VRRP, LACP, SNMP, SSH, SFTP.
· Industrial protocols (IEC 61850, IEC 101 / 104, PTP, OPC UA, DNP3, Modbus TCP/IP) and methods to diagnose / debug using Wireshark.
· Mapping requirements between different cybersecurity standards.
· Process for monitoring vulnerability publications.
About Us:
GE Vernova is a world leader in the energy solutions market with a portfolio of energy businesses across the globe. Grid Solutions provides equipment, systems, and services to bring power reliably and efficiently from the point of generation to end power consumers. We electrify the world with advanced grid technologies and accelerate the energy transition – and we want you to be part of that change and enjoy imagination at work.
If you are ready to make a difference and usher in a new era of clean, reliable energy, come join us.
About GE Grid Solutions:
At GE Grid Solutions we are electrifying the world with advanced grid technologies. As leaders in the energy space our goal is to accelerate the transition for a more energy efficient grid to full fill the needs of tomorrow. With a focus on growth and sustainability GE Grid Solutions plays a pivotable role in integrating Renewables onto the grid to drive to carbon neutral. In Grid Solutions we help enable the transition for a greener more reliable Grid. GE Grid Solutions has the most advanced and comprehensive product and solutions portfolio within the energy sector.
Why we come to work:
At GE Renewable Energy, our engineers are always up for the challenge - and we’re always driven to find the best solution. Our projects are unique and interesting, and you’ll need to bring a solution-focused, positive approach to each one to do your best. Surrounded by committed, loyal colleagues, if you can dare to bring your ingenuity and desire to make an impact, you’ll be exposed to game-changing, diverse projects that truly allow you to play your part in the energy transition.
What we offer:
A key role in a dynamic, international working environment with a large degree of flexibility of work agreements
Competitive benefits, and great development opportunities - including private health insurance.
Additional Information
Relocation Assistance Provided: No