Cybersecurity Engineer

Senior Operational Technology (OT) Cybersecurity Engineer to support a critical infrastructure modernization and fleet monitoring initiative for a premier transportation client. Reporting to the Director of Enterprise Network Critical Infrastructure Services, this role focuses on hands-on deployment, network segmentation, and hardening physical infrastructure in accordance with TSA Security Directives. The ideal candidate will bring strong network engineering expertise to build DMZs, isolate operational technology networks, and secure wayside and onboard transportation assets.

Key Responsibilities

• Execute hands-on network segmentation and establish secure DMZs to isolate Operational Technology (OT), SCADA, and Industrial Control System (ICS) environments from enterprise IT networks.
• Deploy and configure network security architecture, firewalls, and boundary controls across critical transit and fleet monitoring infrastructure.
• Remediate security vulnerabilities and implement controls to ensure full compliance with TSA Rail Security Directives, NIST SP 800-82, and IEC 62443 standards.
• Secure and integrate network connectivity for fleet monitoring systems across transit assets and wayside infrastructure.
• Collaborate with cross-functional network engineering and deployment teams to deliver critical infrastructure security milestones on schedule.
• Attend quarterly in-person Program Increment (PI) planning sessions in the Northeast Corridor (e.g., Philadelphia / Baltimore area).

Qualifications & Requirements

• 8+ years of experience in Cybersecurity or Network Engineering, with a direct focus on OT, ICS, SCADA, or critical infrastructure environments (transit, utilities, energy, or heavy industry).
• Proven, hands-on experience designing and deploying network segmentation, firewalls (e.g., Palo Alto, Cisco), and DMZ architectures within operational networks.
• Deep knowledge of OT network protocols and industrial networking standards.
• Solid understanding of TSA Security Directives and NIST SP 800-82 / IEC 62443 compliance frameworks.
• Strong technical communication skills and the ability to work effectively in a remote team environment.
• Prior experience in SAFe Agile or Scrum frameworks is a plus, but not required.