وصف الوظيفة
Role Overview
ICS Cybersecurity Engineer - Renewable Power at Air Products, based in Duba, Tabuk Region, Saudi Arabia, on a rotation of 8 weeks on / 2 weeks off.
Company Overview
Air Products is a world-leading industrial gases company founded in 1940, with a history of innovation, operational excellence, and commitment to safety and environmental stewardship. The NEOM Green Hydrogen Project is a flagship capital project where Air Products executes an EPC Contract with NEOM Green Hydrogen Company to design, build, and deliver Process Controls, Process Automation Systems, and IT/Digital Technology infrastructure, with cybersecurity compliance as a crucial component of safety, security, and overall project compliance.
Role Purpose
Assure cybersecurity compliance, resilience, and safe operation of power generation and power transmission systems supporting large-scale renewable energy assets. Act as a senior technical individual contributor within the Project Cybersecurity Taskforce, coordinating with Engineering, Pre-Commissioning, Commissioning, and Client operations teams on cyber security field verifications throughout construction, pre-commissioning, commissioning, startup, and handover phases.
Key Responsibilities
Field Verification & Validation
- Perform field verification and validation of cybersecurity design and implementation for renewable power generation and transmission assets.
- Ensure compliance with Saudi and international standards throughout verification activities.
- Support pre-commissioning and commissioning by validating firewall rules, secure remote access, endpoint hardening, role-based access control, logging, and monitoring prior to system energization.
Asset Management & Documentation
- Develop, maintain, and verify OT cybersecurity asset registers, network diagrams, zone-conduit models, and risk registers for power systems.
- Oversee OT cybersecurity handover to operations, including procedures, access governance, incident response alignment, backup, recovery, and secure remote support models.
Risk Assessment & Mitigation
- Lead and support cyber risk assessments for power packages and OEM skid systems.
- Track and close mitigation actions with vendors and contractors.
System Assurance
- Assure cybersecurity controls for Solar PV plants, Wind Turbine systems, BESS, HV/MV substations, and grid interconnections, including PPC and EMS interfaces.
- Oversee and participate in FAT, SAT, CSAT, and performance testing for substation automation systems, turbine control systems, and plant SCADA.
Stakeholder Coordination
- Coordinate closely with subcontractors and OEMs to control third-party access, remote connectivity, and cybersecurity compliance during construction and startup.
- Act as the technical cybersecurity interface between project execution, commissioning teams, OEMs, grid operators, and client representatives.
- Support change management to ensure cybersecurity impacts of design, procurement, installation, and commissioning changes are reviewed and approved.
Qualifications & Experience
- Bachelor's degree in engineering (electronics and communication, instrumentation, or process automation background preferred) or equivalent.
- Minimum 10 to 15 years' experience in Operational Technology (OT) or related field.
- At least 3 years focused on designing, building, or validating the design and implementation of cybersecurity for industrial control systems and networks.
- Project implementation experience with Saudi cyber standards HCIS, NCA, or ISA 62443 industry standards, specifications, regulations, and best practices.
- OT/ICS cybersecurity relevant accreditations such as ISA/IEC 62443, SANS, or other internationally recognized certifications preferred.
Skills & Competencies
- Strong knowledge and understanding of control systems including SAS, SCADA/DCS/PLCs, Wind Turbine systems, and relevant protocols (Modbus, PROFINET, DNP3, IEC 61850).
- Key technologies including Firewalls, IDS, Anti-Virus, and Vulnerabilities assessments in ICS/OT networks.
- Advanced skills in Microsoft Office tools such as Teams, SharePoint, Word, Excel, PowerPoint, and Visio.
- Excellent written and verbal communication skills with ability to communicate appropriately at all levels of the organization.
Additional Information
- Site-based role with rotation schedule of 8 weeks on / 2 weeks off.
- Experience supporting large-scale construction, pre-commissioning, commissioning, startup, and handover phases, ensuring cybersecurity controls are implemented without impacting schedule critical activities.