Senior Cybersecurity Architect - Utility Grid Modernization

The Cybersecurity
United States
7 days ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
10 years minimum
Compensation
$100,000.0 - $165,000.0
Working hours
Regular working hours
Languages
Spanish
Job source

Tech stack

LTE (Telecommunication) Geographic Information Systems Cyber Security Supervisory Control and Data Acquisition (SCADA) Information Systems Security Architecture Professional Meter Data Management (Flow Meters) Network Segmentation Remote Access Technology Software Vulnerability Management Process Control Systems

Job description

  • Assess cybersecurity risks across IT, OT, SCADA, AMI, telecommunications, billing, and enterprise environments.
  • Evaluate existing cybersecurity architecture and identify gaps affecting grid-modernization initiatives.
  • Assess security considerations associated with smart metering, meter-data systems, DERMS, private LTE, and utility communications infrastructure.
  • Define cybersecurity architecture and requirements for access control, network segmentation, secure remote access, monitoring, vulnerability management, incident response, data protection, resilience, and third-party risk.
  • Evaluate the integration and security implications of utility systems including ERP, GIS, OMS, EMS, CIS, billing, and related enterprise platforms.
  • Develop prioritized cybersecurity recommendations based on risk, operational impact, and modernization objectives.
  • Develop a phased cybersecurity roadmap supporting the utility’s modernization program.
  • Participate in stakeholder interviews, technical workshops, architecture reviews, and working sessions.
  • Prepare technical findings, recommendations, and executive-level briefings.
  • Support implementation planning and help translate cybersecurity requirements into actionable modernization initiatives.

Requirements

The ideal candidate brings significant experience working within electric utilities, critical infrastructure, industrial control systems, and complex technology-modernization programs., * 15+ years of professional experience across cybersecurity, utility technology, OT/ICS, industrial automation, telecommunications, or critical infrastructure.

  • 10+ years of experience supporting electric utilities or energy-sector programs.
  • Demonstrated experience with utility environments including SCADA, AMI, smart metering, meter-data systems, billing, ERP, GIS, OMS, EMS, and/or CIS platforms.
  • Extensive experience with OT/ICS cybersecurity architecture and risk assessments.
  • Strong knowledge of cybersecurity frameworks and standards, including:
  • NIST SP 800-53
  • NIST SP 800-82
  • NIST SP 800-207
  • ISA/IEC 62443
  • Experience developing security architecture, technical requirements, risk assessments, and cybersecurity modernization roadmaps.
  • Ability to communicate complex cybersecurity risks and architecture decisions to both technical teams and executive stakeholders.
  • Active CISSP certification.
  • Active PMP certification.
  • Ability to travel periodically during the engagement.
  • Fluent professional English.

Preferred Qualifications

Experience with GIAC GRID, DERMS/distributed-energy technologies, private LTE and utility telecommunications environments is preferred. Spanish-language capability is also beneficial.

Engagement Profile

This is a senior consulting engagement intended for an architect with substantial electric utility and OT cybersecurity experience, rather than a general enterprise cybersecurity background. The selected consultant will work with technical and executive stakeholders to assess the existing environment and establish cybersecurity architecture and priorities supporting a significant grid-modernization initiative.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:22 min

Leveraging unique cultural backgrounds in engineering design

Ixchel Ruiz · LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

3:06 min

Measuring campaign effectiveness and telecommunication incident reporting

Ben Hopkins +1 · Coffee With Developers

1:04 min

Using queues for highly secure network segmentation bridges

Clemens Vasters Clemens Vasters · World Congress 2022

2:00 min

Pivoting to digital engineering and code reuse

Ulrich Irnich Ulrich Irnich · World Congress 2023

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

Videos

See all

Related articles

See all