Cybersecurity Engineer Purdue Level 1/2 Zoning & Firewall Design

Must-Have Qualifications & Skills:
Minimum 10+ years of experience in industrial control system (ICS) cybersecurity,
specifically within energy, oil & gas, or chemical sectors.
Proven track record designing and implementing Purdue Model Level 1 and 2 zones,
secure firewall configurations, and DMZ architectures in OT environments.
Expertise configuring and managing firewalls and network security appliances from
Palo Alto, Fortinet, or equivalent platforms in ICS/OT settings.
Hands-on experience with asset discovery and vulnerability assessment tools such as
Tenable OT, Dragos, Claroty, or Nozomi.
Proficient in PowerShell and Python scripting for automation of security monitoring and
operational controls.
Strong understanding of ICS protocols (Modbus, DNP3, OPC-UA) and OT network
architectures.
Excellent communication skills for cross-team collaboration and report writing.
TWIC Card strongly preferred for secure site access.
Preferred Skills & Certifications:
Certifications such as GICSP (Global Industrial Cyber Security Professional), ISA/IEC
62443 Cybersecurity Expert, CISSP, or CEH.
Familiarity with SIEM tools like Splunk, QRadar, or ArcSight integrated with OT telemetry.
Experience with ICS Incident Response, digital forensics in OT environments, and
industrial malware detection techniques.
Prior experience working with similar large energy/refining companies.