Job DescriptionCDM Smith is seeking an Operational Technology (OT) Cybersecurity and Network Specialist who is a proven self-starter. The successful candidate is passionate about OT Cybersecurity, Industrial Networks, and Process Control Systems with a desire to further enhance their skills and our Automation practice.
As a member of our team, this OT Automation Specialist will contribute to CDM Smith's mission by:
- Independently developing OT networks with senior level oversight and guidance.
- Creating basic to moderately complex control system architectures, network segmentation diagrams, detail drawings, and specifications with general direction.
- Designing OT infrastructure, including SCADA servers, historians, virtualization hosts, domain services, patching architectures, secure remote access platforms, endpoint protection, data backup solutions, and industrial intrusion detection systems.
- Developing IT/OT convergence solutions such as Microsoft Active Directory, virtualization server clusters, NextGen firewalls, multifactor authentication, Demilitarized Zones (DMZ).
- Implementing industry regulations, standards, and frameworks such as NIST CSF, NIST 800-82, and ISA 62443, ensuring adherence to these requirements.
- Applying risk-based engineering judgment to balance cybersecurity, operability, maintainability, and lifecycle cost in OT system designs
- Familiarity with best practices for managing and securing Windows-based environments.
- Evaluating legacy OT systems and offering strategic recommendations for improvements, migrations, or replacements, considering criticality and risk.
- Preparing design reports under limited supervision.
- Reviewing basic to moderately complex level shop drawings consisting of cybersecurity project plans, network segmentation plans, firewall policies, control system components, and server or network rack layout diagrams.
- Preparing OT Cybersecurity and Automation project budgets and construction cost estimates.
- Preparing proposal sections and client presentations under general supervision.
- Traveling nationally or internationally as required to project sites, client meetings, factory tests, and start-up of systems.
- Performing other duties as required.
#LI-LP2
#LI-HYBRID
Skills & Abilities- U.S. Citizenship is required for this position due to federal contract requirements and/or eligibility for a U.S. government security clearance.
- Intermediate knowledge of network technologies, including VLANs, routing, and Next-Generation Firewalls (NGFW).
- Intermediate knowledge of Windows systems in OT environments, including domain membership strategies, patching constraints, antivirus/EDR considerations, and change control.
- Intermediate knowledge of virtualization environments (e.g., VMware, Hyper-V).
- Intermediate knowledge of cybersecurity principles relevant to OT industrial settings.
- Fundamental understanding of SCADA (Supervisory Control and Data Acquisition) and DCS (Distributed Control Systems) configuration and implementation.
- Familiarity with network protocols, architecture, and configuration, including Modbus, DNP3, EtherNet/IP, and OPC along with industrial network design considerations, including availability, determinism, multicast traffic (e.g., IGMP), and maintenance constraints.
- Familiarity with industry regulations, standards, and frameworks such as NIST CSF, NIST 800-82, and ISA 62443, ensuring adherence to these requirements.
- Understanding of cloud-based or edge computing solutions as they relate to OT systems.
- Awareness of disaster recovery, business continuity, and system resilience planning in OT settings.
- Strong communication skills both verbally and written with ability to communicate to a geographically diverse team and client base with varying knowledgebase.
- Strong time management skills and ability to multi-task and prioritize assignments to meet schedules and budgets.
- Client-facing experience and comfort presenting or leading discussions with multidisciplinary teams.
- Enjoys mentoring junior staff and has ability to adapt to different learning styles.
Qualifications - Bachelor's degree in engineering, information systems, computer science, or related field.
- 5 years of related experience.
Equivalent experience may substitute for a degree.
Domestic and/or international travel may be required. The frequency of travel is contingent on specific duties, responsibilities, and the essential functions of the position, which may vary depending on workload and project demands.
Preferred Qualifications- Experience implementing or supporting the configuration of cybersecurity and network OT solutions.
- CompTIA Security +, GIAC GICSP, ISC2 CISSP, ISA/IEC 62443 certification or ability to obtain within 6 months.
- Sector-specific experience in water/wastewater, facilities, or transportation is a plus.
- Familiarity with SCADA/ICS cybersecurity assessments and mitigation strategies.
Amount of Travel Required20% - 40%
Driving RequirementsAn appropriate and valid driver's license is required.
Additional Pay Range InformationCDM Smith is committed to fair and equitable compensation practices. This pay range is a good faith estimate representative of all experience levels for the geographic location assigned to the position. In addition to geographic location, a candidate's salary is determined by several other factors including, but not limited to, the role, function and associated responsibilities, relevant work experience, skills, required certifications, and education/training.
Additional CompensationAll bonuses at CDM Smith are discretionary and may or may not apply to this position.
Visa Sponsorship AvailableNo-We will not support sponsorship in the United States, i.e. H-1B or TN Visas for this position
Agency DisclaimerAll vendors must have a signed CDM Smith Placement Agreement from the CDM Smith Talent Acquisition Manager to receive payment for your placement. Verbal or written commitments from any other member of the CDM Smith Inc. and its divisions and subsidiaries staff will not be considered binding terms. All unsolicited resumes sent to CDM Smith Inc. and its divisions and subsidiaries and any resume submitted to any employee outside of CDM Smith Talent Acquisition Team will be considered property of CDM Smith. CDM Smith Inc. and its divisions and subsidiaries will not be held liable to pay a placement fee.
Pay Range MaxUSD $167,731.00
Pay Range MinUSD $95,846.00