Cybersecurity Engineer

Senior Operational Technology (OT) Cybersecurity Engineer to support a critical infrastructure modernization initiative for a premier transportation client based in Washington, DC. In this role, you will work within a SAFe/Agile delivery framework to enhance network visibility, asset discovery, and security controls across complex Operational Technology (OT), Industrial Control Systems (ICS), and SCADA environments. Operating in accordance with TSA Rail Security Directives and NIST standards, you will collaborate with cross-functional teams to design, implement, and maintain robust security architectures that safeguard vital transit and wayside infrastructure against emerging cyber threats.

Key Responsibilities

• Architect, deploy, and manage security controls for Operational Technology (OT), SCADA, and Industrial Control Systems (ICS).
• Execute network segmentation strategies and enforce boundary controls between enterprise IT and field-level OT networks using the Purdue Model.
• Implement and configure OT security tools for asset discovery, continuous threat monitoring, and vulnerability management (e.g., Claroty, Nozomi Networks, Dragos, Tenable.ot).
• Collaborate within a SAFe/Agile team structure, actively participating in sprint planning, backlog grooming, and daily standups to deliver priority security deliverables on schedule.
• Conduct technical risk assessments and ensure alignment with TSA Security Directives, NIST SP 800-82, and IEC 62443 compliance frameworks.
• Assist in establishing secure remote access mechanisms, centralized patching workflows, and incident response playbooks for critical infrastructure devices.

Qualifications & Requirements

• 7+ years of experience in Cybersecurity, with a primary focus on OT, ICS, SCADA, or critical infrastructure environments (e.g., transit, utilities, energy).
• Hands-on experience with OT network protocols (e.g., Modbus, DNP3, Ethernet/IP, PROFINET) and industrial network security configurations.
• Proven background working in Agile delivery frameworks (SAFe Agile, Scrum, or Kanban).
• Strong understanding of network architecture, firewalls, and industrial network segmentation strategies.
• Relevant industry certifications are highly preferred (e.g., GICSP, GRID, CISSP, CISM).
• Excellent communication skills with the ability to translate technical security requirements into actionable sprint user stories.