Lead Network And Cyber Security Engineer

Not just a job, but a careerYokogawa, award winner for ‘Best Asset Monitoring Technology’ and ‘Best Digital Twin Technology’ at the HP Awards, is a leading provider of industrial automation, test and measurement, information systems and industrial services in several industries.
Our aim is to shape a better future for our planet through supporting the energy transition, (bio)technology, artificial intelligence, industrial cybersecurity, etc. We are committed to the United Nations sustainable development goals by utilizing our ability to measure and connect.
About The TeamOur 18,000 employees work in over 60 countries with one corporate mission, to \"co-innovate tomorrow\". We are looking for dynamic colleagues who share our passion for technology and care for our planet. In return,

we offer
you great career opportunities to grow yourself in a truly global culture where respect, value creation, collaboration, integrity, and gratitude are highly valued and exhibited in everything we do.

Key Responsibilities
& AccountabilitiesUnderstanding customer specifications and standard guidelines such as CIS benchmark, IEC62443, etc.
Preparation of a compliance list in case of any deviation required from the standard practices followed.
Leading the design of Overall Architecture and implementation of secure OT network architectures. Ensure segmentation between IT and OT networks.
Preparation of Design Documents, such as:System ArchitectureLogical ArchitecturePreparation of Bill of Material with the latest available Hardware and softwareFunctional Design SpecificationDetail design specificationFactory Acceptance test ProcedureSite Acceptance test ProcedureMethod Statement for Integration and ModificationRisk Assessment: Conduct and oversee regular risk assessments of the OT environment, identifying vulnerabilities and potential Segmentation: Ensure that the DCS is adequately segmented from other networks, minimizing the risk of potential intrusions from external and internal sources.
Work closely with customer OT cybersecurity teams to ensure consistent security practices across IT and OT landscapes.
Collaborate with OT stakeholders to understand unique requirements and challenges.
Review and assess third‑party vendors to ensure compliance with company security policies.
Recommend security enhancements and purchases that will support the defence of the OT environments for the benefit of the client.
Provide training and guidance to OT engineers on security best practices.
Training & Awareness: Conduct cyber security training among customer‑related personnel. Provide training on recognizing potential cyber threats and following best practices.
Conduct regular security audits and assessments of the OT infrastructure.
Regulatory Compliance: Ensure that OT environments comply with relevant industry regulations, standards, and best practices such as IEC 62443, NERC CIP, etc.
Stakeholder Management: Engage with client personnel and other key stakeholders to ensure alignment on cybersecurity priorities and practices.
Vendor collaboration: Interaction with various OEMs to determine the best possible solution for requirements.
Support in decision‑making on Hardware selection based on CRS and cost‑effectiveness.
Work closely with the DCS team to understand and address potential vulnerabilities, ensure secure integration of new system components, and obtain necessary security And Experience10 to 15+ Years of experience in IT/OT for configuration of Networks and Implementation of Cyber security.
Previous experience in leading a team of network and system security engineers.
Certification on the following product is added advantage:CiscoNozomiPaulo AltoVM WarePreferred Certification:IC32, IEC62443Communication Skills, both verbal and written.
Required Competencies / SkillsSwitches – L2/L3Configuration Knowledge on L2 and L3 SwitchesHardening of SwitchesTroubleshooting capacity on multiple security solutionsDeep level Knowledge of ACL’sControl: Implement and manage strict access controls for the DCS environment. This includes user authentication, role-based access, and secure remote access methodologies.
Product Knowledge and Certification added advantage:HirshmanCISCOOther Industrial SwitchesDesigning and Implementation of the network with the layer conceptsNetwork switch configurationDesigning the network and positioning the components based on the functionalityRouting SwitchWindows Security Update System (WSUS)Patch Management: Stay informed about software and firmware updates from DCS vendors. Safely and effectively implement patches while ensuring minimal disruption to PatchingNMSConfiguration of What's Up GoldCreating an Architecture diagramConfiguring NMS system installation to commissioningCreating DashboardAntivirusMacAfee AV EpoWhitelistingDesktop‑Hardening SystemAntivirus ProtectionWhitelistingDenial of Installing new Exe and Related filesIntegrity controlChange ControlApplication ControlData loss preventionVirtual MachineHands‑on experience i