> Markdown version of [/jobs/ext/1311688-senior-consultant-nerc-cip-sme](https://www.wearedevelopers.com/jobs/ext/1311688-senior-consultant-nerc-cip-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Consultant - NERC CIP SME - **Company:** Guidehouse Inc. - **Location:** Arlington, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cyber Security, Data Architecture, Data Security, Supervisory Control and Data Acquisition (SCADA), Identity and Access Management, Intrusion Detection and Prevention, Metadata Standards, Network Segmentation, Role-Based Access Control, Data Streaming, Unstructured Data, Data Lakes, Process Control Systems, Integration Frameworks, CIS Benchmarks, Vulnerability Analysis - **Published:** July 17, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=1a98833b93f5ec87 ## About the Role We are seeking a highly skilled professional to design and implement secure, compliant architectures for enterprise and operational environments. This role requires deep expertise in regulatory frameworks, cybersecurity best practices, and advanced data architecture., * Due to nature of client engagements must be a US Permanent Resident or US Citizen * Bachelor's degree from an accredited university/college * Minimum of THREE (3) years post-graduation working experience within the electric utility industry or a NERC related regulator. * Work experience for all levels must be an emphasis on North American NERC Reliability Standards (USA and/or Canada) supporting regulatory framework and processes around NERC Critical Infrastructure Protection (CIP) and Regional Entities. * Experience in designing enterprise data models, data lakes, warehouses, and integration frameworks using structured and unstructured data. * Deep understanding of NIST, ISO 27001, and CIS controls to architect secure systems and enforce security compliance. * In-depth knowledge of implementing NERC CIP standards (002-013), audit preparation, evidence gathering, and mitigation planning. * Proficient in securing data flows across AWS, Azure, and on-prem environments with encryption, IAM, and network segmentation. * Designs and implements RBAC, ABAC, MFA, and privileged access management aligned with CIP-007 and CIP-005 requirements. * Ability to design secure architectures that anticipate attack vectors, supported by playbooks and detection strategies. * Familiar with securing OT environment such EMS, SCADA, DCS, and other industrial control systems within the Bulk Electric System. * Ensures integrity, availability, and confidentiality of data through metadata standards, classification, retention, and purging policies. * Strong writing skills for creating security architecture diagrams, CIP evidence packages, procedures, and training materials. * Works effectively with compliance, operations, IT, and engineering teams to align technical architecture with regulatory and business needs. * Ability to travel to include potential international as needed. * Ability to work onsite in a Guidehouse Office or Client Office location. * Currently reside in the contiguous United States. What Would Be Nice To Have: * Preference will be given to candidates within reasonable driving distance of listed core Guidehouse Office or Client Office Location. * Specific working experience related to any of the following: + Bulk Electric System (BES) and power systems + Electrical Reliability + NERC/FERC Enforcement or Auditing ## Description * Design enterprise data models, data lakes, warehouses, and integration frameworks for structured and unstructured data. * Architect secure systems aligned with NIST, ISO 27001, and CIS controls to ensure compliance. * Implement NERC CIP standards (002-013), including audit preparation, evidence gathering, and mitigation planning. * Secure data flows across AWS, Azure, and on-prem environments using encryption, IAM, and network segmentation. * Develop and enforce RBAC, ABAC, MFA, and privileged access management in compliance with technical CIP standards or similar regulations * Create secure architectures that anticipate attack vectors, supported by playbooks and detection strategies. * Protect OT environments such as EMS, SCADA, DCS, and other industrial control systems within the Bulk Electric System. * Maintain data integrity, availability, and confidentiality through metadata standards, classification, retention, and purging policies. * Collaborate with compliance, operations, IT, and engineering teams to align technical architecture with regulatory and business needs. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Empowering Retail Through Applied Machine Learning](https://www.wearedevelopers.com/videos/976-empowering-retail-through-applied-machine-learning) - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)