وصف الوظيفة
Role Overview
ICS Cybersecurity Engineer – Renewable Power at Air Products, based in Duba, Tabuk Region, Saudi Arabia, working on rotation of 8 weeks ON / 2 weeks OFF.
Company Overview
Air Products is a world-leading industrial gases company founded in 1940 with a proud history of innovation, operational excellence, and an unwavering commitment to safety and environmental stewardship. The NEOM Green Hydrogen Project is a flagship capital project at scale, where Air Products executes an EPC Contract with NEOM Green Hydrogen Company (NGHC) to design, build, and deliver Process Controls, Process Automation System, and IT/Digital Technology infrastructure scope.
Role Purpose
The Cybersecurity Engineer – Renewable Power Sector is a senior technical individual contributor within the Project Cybersecurity Taskforce, responsible for assuring cybersecurity compliance, resilience, and safe operation of power generation and power transmission systems supporting large-scale renewable energy assets, including Solar PV, Wind Turbines, Battery Energy Storage Systems (BESS), HV/MV substations, and grid interfaces. The role coordinates cybersecurity field verifications with Engineering, Pre-Commissioning, Commissioning, and Client operations teams, and acts as the technical interface between Air Products project execution, commissioning teams, and vendors during field verification of cyber assets. The Engineer supports large-scale construction, pre-commissioning, commissioning, startup, and handover phases, ensuring cybersecurity controls are implemented without impacting schedule-critical activities.
Key Responsibilities
Verification and Compliance
- Perform field verification and validation of cybersecurity design and implementation for renewable power generation and transmission assets, ensuring compliance with Saudi and international standards.
- Assure cybersecurity controls for Solar PV plants, Wind Turbine systems, BESS, HV/MV substations, and grid interconnections, including Power Plant Controller (PPC) and Energy Management System (EMS) interfaces.
Asset Management and Documentation
- Develop, maintain, and verify Operational Technology (OT) cybersecurity asset registers, network diagrams, zone-conduit models, and risk registers for power systems.
Risk Assessment and Mitigation
- Lead and support cyber risk assessments for power packages and Original Equipment Manufacturer (OEM) skid systems; track and close mitigation actions with vendors and contractors.
Pre-Commissioning and Commissioning Support
- Support pre-commissioning and commissioning by validating firewall rules, secure remote access, endpoint hardening, role-based access control, logging, and monitoring prior to system energization.
- Oversee and participate in Factory Acceptance Testing (FAT), Site Acceptance Testing (SAT), Commissioning Site Acceptance Testing (CSAT), and performance testing for substation automation systems, turbine control systems, and plant Supervisory Control and Data Acquisition (SCADA).
Vendor and Third-Party Coordination
- Coordinate closely with subcontractors and OEMs to control third-party access, remote connectivity, and cybersecurity compliance during construction and startup.
- Act as the technical cybersecurity interface between project execution, commissioning teams, OEMs, grid operators, and client representatives.
Change Management
- Support change management to ensure cybersecurity impacts of design, procurement, installation, and commissioning changes are reviewed and approved.
Operational Handover
- Contribute to OT cybersecurity handover to operations, including procedures, access governance, incident response alignment, backup, recovery, and secure remote support models.
Qualifications & Experience
- Bachelor's degree in engineering (Electronics & Communication, Instrumentation, or Process Automation background preferred) or equivalent.
- Minimum 10 to 15 years' experience in Operational Technology (OT) or related field.
- At least 3 years focused on designing, building, or validating the design and implementation of cybersecurity for industrial control systems and networks.
- Project implementation experience with Saudi cyber standards (HCIS, NCA) or ISA 62443 Industry standards, specifications, regulations, and best practices.
- OT/ICS cybersecurity relevant accreditations such as ISA/IEC62443, SANS, or other internationally recognized certifications preferred.
Skills & Competencies
- Strong knowledge and understanding of control systems (Safety Automation Systems, SCADA/Distributed Control Systems/Programmable Logic Controllers, etc.), including Wind Turbine systems.
- Deep familiarity with relevant protocols (Modbus, PROFINET, DNP3, IEC61850, etc.).
- Key technologies including Firewalls, Intrusion Detection Systems (IDS), Anti-Virus, and Vulnerability Assessments in ICS/OT networks.
- Advanced skills in Microsoft Office tools including Teams, SharePoint, Word, Excel, PowerPoint, and Visio.
- Excellent written and verbal communication skills with ability to communicate appropriately at all levels of the organization.
Additional Information
- Position is site-based in Duba, Tabuk Region, Saudi Arabia.
- Working rotation: 8 weeks ON / 2 weeks OFF.