Industrial Control Engineer

LLNL•Livermore, CA

7d•Hybrid

About The Position

Lawrence Livermore National Laboratory is hiring industrial control engineers for its Cyber and Infrastructure Resiliency Program. The role is within the National Security Engineering Division (NSED) in the Engineering directorate and is matrixed to the Cyber and Infrastructure Resilience Program. The successful candidate will join a multidisciplinary team working to ensure safe, reliable, and secure infrastructure systems and contribute to research and development in cybersecurity for critical infrastructure. The position has a hybrid schedule, with in-person and virtual work and the flexibility to work from home one or more days per week. The role may be filled at SES.2 or SES.3, depending on the candidate’s knowledge and related experience. At the SES.2 level, the engineer analyzes industrial control and SCADA networks and systems for vulnerabilities and indicators of compromise, and contributes to planning and conducting tests and validation of industrial control network characterization tools and simulations. The engineer prepares and contributes to presentations for sponsors and stakeholders, addresses moderately complex problems, collaborates with developers, and works independently under limited direction as well as with a multidisciplinary team. At the SES.3 level, the engineer additionally applies advanced industrial control systems expertise, provides technical direction and leadership to cross-disciplinary teams and external sponsors, leads planning and prioritization of complex project scopes and schedules, presents findings and proposals, and independently leads development of research and development proposals under minimal direction.

Requirements

Ability to secure and maintain a U.S. DOE Q-level security clearance; U.S. citizenship is required for this clearance.
Bachelor’s degree in Engineering, Science, or another technical discipline, or an equivalent combination of education and relevant experience.
Comprehensive knowledge and experience in the design, setup, programming, operation, and maintenance of industrial control systems, including some of PLCs, Ladder Logic, DDC, embedded automation platforms, SCADA systems, and timeseries historians.
Experience troubleshooting industrial control system operations and communications, with a focus on OT and IT network integration.
Experience in Operational Technology (OT) operations, including responsibilities for PLC or DDC system operation, networking, and PC system administration.
Experience using scripting or programming tools to automate system deployment and configuration, perform data collection, and build custom system integrations.
Ability to manage concurrent technical tasks with competing priorities, communicate issues with management, and meet project deadlines with minimal guidance.
Experience providing innovative approaches and applying new technologies to broadly defined tasks and projects.
Interpersonal skills to interact with personnel at all levels and work independently in a diverse, multidisciplinary team environment.
Effective written and verbal communication skills to prepare, present, and document technical information.
At SES.3: Advanced knowledge and significant experience in industrial control systems, including providing technical direction and leadership to cross-disciplinary teams and external sponsors.
At SES.3: Advanced experience applying analytical and problem-solving skills to complex problems.
At SES.3: Experience leading analysis of industrial control networks for vulnerabilities.

Nice To Haves

Knowledge of cybersecurity best practices in industrial control applications and networks.
Familiarity with control systems for one or more infrastructure-related applications, such as electricity, gas, water, or communications.
Familiarity with network packet analysis tools such as tcpdump, Wireshark, tshark, and libpcap.
Familiarity with safety and regulatory requirements and guidelines related to industrial control systems.
Familiarity with computer networking concepts and security, including subnetting, routing protocols, VoIP, DNS, VPNs, encryption techniques and technologies, secure network architectures, and network security technologies such as encryption and firewalls.

Responsibilities

Analyze industrial control and SCADA networks and systems to identify potential vulnerabilities and indicators of compromise.
Work with interdisciplinary teams of scientists and engineers on relevant national security projects.
Contribute to planning and executing tests and validation of industrial control network characterization tools and simulations, in collaboration with cyber-physical modeling and testbed teams.
Prepare and contribute to presentations communicating results to sponsors and other stakeholders.
Provide solutions to moderately complex problems involving largely identifiable factors as an effective member of a multidisciplinary team.
Engage and collaborate frequently with other developers to share relevant knowledge, opinions, and recommendations.
Work independently under limited direction and collaboratively as part of a team.
Perform other duties as assigned.
At SES.3: Provide technical direction and leadership to cross-disciplinary teams and external sponsors.
At SES.3: Lead planning and prioritization of complex project scopes and schedules.
At SES.3: Present solutions, findings, and proposals to colleagues, senior staff, and sponsors.
At SES.3: Independently lead development of research and development proposals under minimal direction.