Why this role stands out
This hybrid Cybersecurity Engineer role offers a fantastic opportunity to safeguard critical infrastructure and develop advanced skills within a leading consulting firm. You'll thrive here if you have a passion for protecting vital systems and enjoy collaborating in a dynamic, Agile environment to build robust security solutions. Apply today to contribute to a significant modernization initiative and advance your career in operational technology security.
Quick overview
Job description
Senior Operational Technology (OT) Cybersecurity Engineer to support a critical infrastructure modernization and fleet monitoring initiative for a premier transportation client. Reporting to the Director of Enterprise Network Critical Infrastructure Services, this role focuses on hands-on deployment, network segmentation, and hardening physical infrastructure in accordance with TSA Security Directives. The ideal candidate will bring strong network engineering expertise to build DMZs, isolate operational technology networks, and secure wayside and onboard transportation assets.
Key Responsibilities
- Execute hands-on network segmentation and establish secure DMZs to isolate Operational Technology (OT), SCADA, and Industrial Control System (ICS) environments from enterprise IT networks.
- Deploy and configure network security architecture, firewalls, and boundary controls across critical transit and fleet monitoring infrastructure.
- Remediate security vulnerabilities and implement controls to ensure full compliance with TSA Rail Security Directives, NIST SP 800-82, and IEC 62443 standards.
- Secure and integrate network connectivity for fleet monitoring systems across transit assets and wayside infrastructure.
- Collaborate with cross-functional network engineering and deployment teams to deliver critical infrastructure security milestones on schedule.
- Attend quarterly in-person Program Increment (PI) planning sessions in the Northeast Corridor (e.g., Philadelphia / Baltimore area).
Qualifications & Requirements
- 8+ years of experience in Cybersecurity or Network Engineering, with a direct focus on OT, ICS, SCADA, or critical infrastructure environments (transit, utilities, energy, or heavy industry).
- Proven, hands-on experience designing and deploying network segmentation, firewalls (e.g., Palo Alto, Cisco), and DMZ architectures within operational networks.
- Deep knowledge of OT network protocols and industrial networking standards.
- Solid understanding of TSA Security Directives and NIST SP 800-82 / IEC 62443 compliance frameworks.
- Strong technical communication skills and the ability to work effectively in a remote team environment.
- Prior experience in SAFe Agile or Scrum frameworks is a plus, but not required.
Similar jobs
- BA
SAP BTP Platform & Security EngineerRecently posted
Boston Associate Software Systems · United States · Hybrid 🇺🇸
OAuthSAMLHTTPS+1TechnologySalary not listed - SC
Senior Security ArchitectRecently posted
ServIT Consulting LLC · Orange, CA · On-site 🇺🇸
PrismaAWSAzure+1TechnologySalary not listed - SC
Senior Info Security EngineerRecently posted
ServIT Consulting LLC · Orange, CA · On-site 🇺🇸
EncryptionMFADNS+2TechnologySalary not listed - SO

Cybersecurity Lead with Security ClearanceRecently posted
SOSi · Honolulu, HI · Remote 🇺🇸
GDPRHIPAAProject Management+2Technology$157.4k - $208.4k/yr - RA

Senior Principal Systems Security Engineer (Program Protection / Anti-Tamper) - P5 (Onsite-Tucson, AZ)Recently posted
Raytheon · Tucson, AZ · On-site 🇺🇸
FPGAScrumAgileTechnology$132.4k - $251.6k/yr - PO

ISSE with Security ClearanceRecently posted
Prodigy One, LLC · Annapolis Junction, MD · Hybrid 🇺🇸
AgileAdministrative$124k - $185k/yr - CI

Senior Application Security Engineer (Java), VPRecently posted
Citi · Irving, TX · Hybrid 🇺🇸
DockerGCPMicroservices+16Technology$125.8k - $188.6k/yr - DS

Senior Principal Software Security EngineerRecently posted
Disability Solutions · El Paso, TX · Hybrid 🇺🇸
ScrumC++Kanban+4Technology$132.4k - $251.6k/yr - RA

Senior Security Engineer, IdentityRecently posted Auto Apply
Ramp · NYC · Hybrid 🇺🇸
Google WorkspaceOAuthSAML+5Technology$10k/yr - DS

Embedded Security Software Engineer II (Onsite)Recently posted
Disability Solutions · El Paso, TX · Hybrid 🇺🇸
GitScrumC+++5Technology$68.9k - $131.1k/yr - WM
Senior Manager, Executive ProtectionRecently posted Auto Apply
WM · Houston · Hybrid 🇺🇸
Case ManagementComplianceInternal AuditSalary not listed - VS

Endpoint Security Engineer with Security ClearanceRecently posted
Valiant Solutions LLC · Springfield, VA · Remote 🇺🇸
Active DirectoryVMwareLinux+1Technology$101.4k - $144.9k/yr
