ICS Cybersecurity Engineer

Role Overview

ICS Cybersecurity Engineer at Air Products, based at the NEOM Green Hydrogen Project site in Duba, Tabuk Region, Saudi Arabia.

Company Overview

Air Products is a world-leading industrial gases company founded in 1940 with a history of innovation and operational excellence. The NEOM Green Hydrogen Project is a flagship capital project for Air Products, executing an EPC Contract with NEOM Green Hydrogen Company to design, build, and deliver Process Controls, Process Automation Systems, and IT/Digital Technology infrastructure. Cybersecurity is a crucial component of the project's safety, security, and compliance requirements.

Role Purpose

As a key member of the Cybersecurity task force, the ICS Cybersecurity Engineer undertakes field verification of cyber assets to ensure compliance with project specifications and site acceptance criteria. The role serves as the technical interface between Air Products project execution, commissioning teams, and vendors during field verification of cyber assets, while coordinating across Engineering, Pre-Commissioning, Commissioning, and Client operations teams.

Key Responsibilities

Field Verification & Testing

• Perform field verification of the design, implementation, and testing of cyber assets to meet cybersecurity standards, regulatory requirements, technologies, processes, procedures, and specifications.
• Transition project assets to commissioning, start-up, and final handover to the client.
• Lead and oversee architecture, standards, and FAT/SAT/CSAT procedures development, execution, and performance testing.

Asset Management & Documentation

• Develop, document, and maintain cybersecurity asset register and other key deliverables as guided by the Site Cybersecurity Lead or Cybersecurity Manager.
• Support OT cybersecurity handovers to operations, including procedures, asset inventories, access management, and incident response alignment.

Risk Assessment & Compliance

• Organize and lead or facilitate the resolution and implementation of cybersecurity risk assessment exercises.
• Implement risk assessment recommendations for Air Products design and vendor or skid package control systems.
• Identify and escalate risks and opportunities during project execution.

Pre-Commissioning & Commissioning Support

• Support pre-commissioning and commissioning teams by validating firewall rules, secure remote access, endpoint hardening, asset inventory validation, access control execution, and logging before system energization.
• Ensure the verification and approval of third-party device access needs as requested by subcontractors and vendors as part of commissioning and start-up requirements on vendor packages.
• Coordinate with vendors and Air Products engineering teams to resolve and liquidate punch points identified during field verification of cyber assets.

Coordination & Communication

• Participate in technical coordination meetings with cross-functional teams as guided by the Site Cybersecurity Lead.
• Act as the technical interface between Air Products project execution, commissioning teams, and vendors.
• Prepare weekly updates and dashboards to the Site Cybersecurity Lead and the Project Cybersecurity Collaboration Lead.
• Collect and report lessons learned during vendor site visits and project execution.

Change Management & Operations Model

• Coordinate and assist the Site Cybersecurity Lead with change management activities to ensure design, procurement, installation, commissioning, and startup of cybersecurity scope are reviewed for schedule and budget compliance.
• Contribute to OT Cybersecurity Operations Model, including monitoring, patching, backup, disaster recovery, and secure remote support.

Qualifications & Experience

• Bachelor's degree in engineering with electronics and communication, instrumentation, or process automation background preferred, or equivalent.
• Minimum 10 to 15 years of experience in Operational Technology (OT) or related field.
• At least 3 years of focused experience designing, building, or validating the design and implementation of cybersecurity for industrial control systems and networks.
• Project implementation experience with Saudi cyber standards: HCIS, NCA, and CRA compliance.
• Knowledge of ISA 62443 Industry standards, specifications, regulations, and best practices.
• OT/ICS cybersecurity relevant accreditations such as ISA/IEC 62443, SANS, or other internationally recognized certifications preferred.
• Additional cybersecurity certifications such as CISSP, CISM, or ISO 27001 are advantageous.

Skills & Competencies

• Strong knowledge and understanding of control systems (SCADA/DCS/PLCs).
• Strong knowledge of relevant protocols (Modbus, PROFINET, DNP3, IEC 61850).
• Strong knowledge of key technologies including Firewalls, IDS, Anti-Virus, and vulnerability assessments in ICS/OT networks.
• Advanced skills in Microsoft Office tools including Teams, SharePoint, Word, Excel, PowerPoint, and Visio.
• Excellent written and verbal communication skills with the ability to communicate appropriately at all levels of the organization.

Additional Information

• Position is based at the project site in Duba, Tabuk Region, Saudi Arabia.
• Working rotation of 8 weeks ON / 2 weeks OFF.
• Experience supporting large-scale construction, pre-commissioning, commissioning, startup, and handover phases while ensuring cybersecurity controls are implemented without impacting schedule-critical activities.