ICS Cybersecurity Enginer - Renewable Power

Role Overview

ICS Cybersecurity Engineer – Renewable Power at Air Products, based in Tabuk Region, Saudi Arabia, supporting the NEOM Green Hydrogen Project.

Company Overview

Founded in 1940, Air Products is a world-leading industrial gases company with a proud history of innovation, operational excellence, and unwavering commitment to safety and environmental stewardship. Air Products is executing an EPC Contract with NEOM Green Hydrogen Company (NGHC) to design, build, and deliver Process Controls, Process Automation Systems, and IT/Digital Technology infrastructure. Cybersecurity compliance is a crucial part of the project's safety, security, and overall compliance with local laws and regulations.

Role Purpose

As a senior technical competent individual contributor within the Project Cybersecurity Taskforce, this role assures cybersecurity compliance, resilience, and safe operation of power generation and power transmission systems supporting large-scale renewable energy assets. The engineer coordinates with Engineering, Pre-Commissioning, Commissioning, and Client operations teams on cyber security field verifications and acts as the technical interface between Air Products project execution, commissioning teams, and vendors during field verification of cyber assets, while supporting large-scale construction, pre-commissioning, commissioning, startup, and handover phases.

Key Responsibilities

Field Verification and Compliance

• Perform field verification and validation of cybersecurity design and implementation for renewable power generation and transmission assets.
• Ensure compliance with Saudi and international standards.
• Assure cybersecurity controls for Solar PV plants, Wind Turbine systems, BESS, HV/MV substations, and grid interconnections, including PPC and EMS interfaces.

Asset Management and Documentation

• Develop, maintain, and verify OT cybersecurity asset registers.
• Maintain network diagrams, zone-conduit models, and risk registers for power systems.

Risk Assessment and Mitigation

• Lead and support cyber risk assessments for power packages and OEM skid systems.
• Track and close mitigation actions with vendors and contractors.

Pre-Commissioning and Commissioning Support

• Support pre-commissioning and commissioning by validating firewall rules, secure remote access, endpoint hardening, role-based access control, logging, and monitoring prior to system energization.
• Oversee and participate in FAT, SAT, CSAT, and performance testing for substation automation systems, turbine control systems, and plant SCADA.

Third-Party Coordination

• Coordinate closely with subcontractors and OEMs to control third-party access, remote connectivity, and cybersecurity compliance during construction and startup.

Stakeholder Engagement

• Act as the technical cybersecurity interface between project execution, commissioning teams, OEMs, grid operators, and client representatives.

Change and Handover Management

• Support change management to ensure cybersecurity impacts of design, procurement, installation, and commissioning changes are reviewed and approved.
• Contribute to OT cybersecurity handover to operations, including procedures, access governance, incident response alignment, backup, recovery, and secure remote support models.

Qualifications & Experience

• Bachelor's degree in engineering with electronics & communication, instrumentation, or process automation background preferred, or equivalent.
• Minimum 10 to 15 years' experience in Operational Technology (OT) or related field.
• At least 3 years focused on designing, building, or validating the design and implementation of cybersecurity for industrial control systems and networks.
• Project implementation experience with Saudi cyber standards HCIS, NCA, or ISA 62443 Industry standards, specifications, regulations, and best practices.
• OT/ICS cybersecurity relevant accreditations such as ISA/IEC 62443, SANS, or other internationally recognized certifications preferred.

Skills & Competencies

• Strong knowledge and understanding of control systems including SAS, SCADA/DCS/PLCs, and Wind Turbine systems.
• Proficiency in relevant protocols including Modbus, PROFINET, DNP3, and IEC 61850.
• Knowledge of key technologies including Firewalls, IDS, Anti-Virus, and Vulnerabilities assessments in ICS/OT networks.
• Advanced skills in Microsoft Office tools including Teams, SharePoint, Word, Excel, PowerPoint, and Visio.
• Excellent written and verbal communication skills with the ability to communicate appropriately at all levels of the organization.

Additional Information

• Site-based role located in Tabuk Region, Saudi Arabia.
• Working rotation of 8 weeks ON and 2 weeks OFF.