Lead Engineer – Cyber Security

About the role

The Lead Engineer – Cyber Security is responsible for designing, configuring, implementing and assuring cyber security solutions for substation automation projects. The role bridges technical tendering and execution, working closely with internal teams and customers to ensure compliant and robust security architectures.

Key responsibilities

• Estimate man‑days for design activities during the tender (ITO) stage and support opportunity preparation.
• Review RFQs related to cyber security, provide recommendations, and create security assurance plans.
• Develop architecture references, BOM templates and cost‑estimation models for cyber security devices.
• Coordinate with multidisciplinary teams to produce design documentation, ensure on‑time delivery and quality compliance.
• Approve technical evaluations of supplier offers and support procurement negotiations.
• Lead factory FAT preparation, conduct internal validation and support customer FAT/SAT for cyber security systems.
• Manage design issues through resolution, validate designs during customer acceptance and maintain consistency of engineering documents.
• Configure cyber security devices (switches, firewalls, IDS, jump boxes, etc.) and conduct FAT/SAT testing.

Required profile

• Bachelor’s degree in Electrical Engineering or a related discipline.
• Minimum 5 years experience in substation automation projects and OT security.
• Proven experience with security designs, network topology for OT and OT protocols.
• Fluent English communication skills (spoken and written).
• Willingness to travel up to 50 % of the time for missions, tender support and customer meetings.

Required skills

• Substation automation and OT security expertise.
• Security design and architecture (IEC 62443, NERC CIP, IEEE 1686, IEC 62351).
• Network technologies: LDAP, RADIUS, GPO, SSH, SFTP, HTTPS, SYSLOG, TLS, DMZ, virtualization.
• Familiarity with GE DS Agile, GPG or similar SAS systems.
• Experience with firewalls, IDS/IPS (e.g., Nozomi), routers and switches.
• Ability to produce functional design specifications and security assurance plans.
• Knowledge of OT protocols and best practices for network segmentation.