Industrial Control Systems (ICS) Technician

ExxonMobil•Carlsbad, NM

About The Position

The Industrial Control Systems (ICS) Technician is responsible for supporting the cybersecurity, compliance, and operational reliability of Industrial Control Systems (ICS) and Operational Technology (OT) environments across Oil & Gas facilities. This role works closely with Operations, Automation, Engineering, Information Technology (IT), and ICSR teams to develop, maintain, and enforce cybersecurity requirements that protect critical control systems from cyber threats while ensuring safe and reliable operations.

Requirements

Associate's Degree or higher in Instrumentation, Industrial, Electronics, Engineering Technologies or Cybersecurity, Computer Science or related degree.
3–7 years of experience in one or more of the following: Industrial Control Systems, Automation and Controls, OT Networking, Cybersecurity.

Nice To Haves

Experience supporting SCADA, PLC, DCS, or SIS environments.
Knowledge of industrial network protocols including Modbus, DNP3, OPC UA, Ethernet/IP, and TCP/IP.
Experience with cybersecurity compliance programs and risk management.
Familiarity with Cisco networking, industrial firewalls, VPN technologies, and Active Directory environments.
Understanding of cloud connectivity and third-party vendor access management within OT environments.
Global Industrial Cyber Security Professional (GICSP)
ISA/IEC 62443 Cybersecurity Fundamentals Specialist
CompTIA Security+
CISSP
Certified Information Systems Auditor (CISA)

Responsibilities

Develop, maintain, and implement cybersecurity requirements for ICS and OT systems.
Support compliance with industry standards, including ISA/IEC 62443, NIST Cybersecurity Framework (CSF), NIST SP 800-82, API standards, and company cybersecurity policies.
Support cybersecurity initiatives for SCADA systems, Distributed Control Systems (DCS), and Programmable Logic Controllers (PLC).
Maintain and administer the inventory of all External Network Connections (ENCs) between ICS/OT environments, corporate IT networks, third-party vendors, cloud services, and business partners.
Develop, maintain, and review ENC documentation, including network diagrams, data flow mappings, connection inventories, risk assessments, business justifications, and approval records.
Support the design and implementation of secure OT network architectures in an L2/L3 environment.
Assist with network segmentation and secure communication between IT and OT environments.
Review firewall configurations, access-control policies, and remote access solutions.
Conduct cybersecurity risk assessments and vulnerability reviews.
Support internal and external cybersecurity audits.
Track remediation plans and corrective actions for identified cybersecurity gaps.
Support cybersecurity incident response and investigation activities.
Assist in root cause analysis and cybersecurity event documentation.