Junior ICS/OT Cybersecurity Engineer

Sentar•Huntsville, AL

2d•Onsite

About The Position

Sentar is seeking a motivated, detail-oriented Junior ICS/OT Cybersecurity Engineer in Huntsville, Alabama. The position focuses on post-construction cybersecurity hardening of Industrial Control Systems (ICS) and Operational Technology (OT) environments to support compliance with UFGS 25 05 11. The engineer will work with Sentar engineers, prime and subcontractors, and government partners to secure facility-related control systems, implement cybersecurity best practices, and support the Authorization to Operate (ATO) process for mission-critical infrastructure. Frequent travel to project sites is required, including possible international travel and occasional assignments of up to three weeks; a typical onsite assignment lasts one week. A passport is preferred. The role involves hardening control system components such as PLCs, SCADA, security systems, fire alarms, electrical panels, and HVAC systems. The engineer will apply security controls, operating-system hardening, DISA STIGs, and boundary protection configurations; conduct SCAP scans, vulnerability assessments, risk analyses, and security testing; and collaborate with architecture and engineering teams. The engineer will also help prepare and maintain System Security Plans, RMF artifacts, compliance reports, and ATO packages, using eMASS under senior engineer guidance. A Secret clearance is required. Candidates must possess an active clearance or be eligible to obtain one. A bachelor’s degree in Cybersecurity, Electrical Engineering, Computer Science, or a related field is required, or equivalent experience. CompTIA Security+ is required; an active CISSP or willingness to obtain it within the first year is strongly preferred.

Requirements

Bachelor’s degree in Cybersecurity, Electrical Engineering, Computer Science, or a related field, or equivalent experience.
CompTIA Security+ certification.
Secret clearance required; must possess an active clearance or be eligible to obtain one.
Basic understanding of ICS/OT protocols such as Modbus, DNP3, and OPC.
Familiarity with NIST 800-53, NIST 800-82, UFGS 25 05 11, and IEC 62443.
Familiarity with eMASS for RMF workflows and ATO documentation.
Experience with network security scanning tools such as ACAS or Nessus and system-hardening techniques.
Knowledge of Windows and Linux operating systems in industrial environments.
Cisco command-line interface knowledge.
Strong analytical and problem-solving abilities.
Excellent communication skills for documenting findings and collaborating with cross-functional teams.
Ability to work under supervision and learn quickly in a multi-project environment.
Ability or willingness to learn UFGS 25 05 11 compliance requirements, including post-construction hardening and secure configuration of control system components.
Basic understanding of ATO processes, including assessment preparation, POA&M remediation, and maintaining post-authorization compliance.
Willingness to travel to project sites, including internationally and to remote locations.

Nice To Haves

Active CISSP certification, or willingness to obtain it within the first year.
Familiarity with post-construction phases of facility-related control system projects.
Experience with RMF or DoD cybersecurity compliance processes, including ATO lifecycle management.
Hands-on experience using eMASS for control implementation, documentation, or reporting.
Experience running SCAP scans and applying DISA STIGs in a technical environment.
Basic scripting skills, such as Python or PowerShell, for automating hardening tasks.
Passport holder.

Responsibilities

Assist with post-construction cybersecurity hardening of ICS/OT systems, including PLCs, SCADA, security systems, fire alarms, electrical panels, HVAC, and other control system components.
Implement security controls and configurations consistent with UFGS 25 05 11, including operating-system hardening, system boundary protection, access control, and audit logging.
Run SCAP scans to assess compliance and identify vulnerabilities in ICS/OT environments.
Apply DISA STIGs to harden operating systems, applications, and network devices in control system architectures.
Conduct vulnerability assessments and risk analyses using automated and manual techniques to identify and mitigate security gaps.
Collaborate with architecture and engineering teams to integrate cybersecurity measures into system designs before and after construction.
Support the development, documentation, and submission of SSPs, RMF artifacts, and compliance reports aligned with UFGS standards to achieve and maintain ATO.
Use eMASS under senior engineer guidance to enter, track, and manage cybersecurity controls, vulnerabilities, and ATO packages.
Perform security testing, including system scans, penetration testing, and configuration reviews, to validate hardening and ATO readiness.
Stay current on emerging threats, vulnerabilities, and industry standards affecting ICS/OT environments.
Travel to project sites, potentially worldwide and including remote locations, for hands-on hardening and validation activities.
Prepare systems for assessment, address POA&Ms, and help maintain compliance after authorization.

Benefits

Voluntary medical, dental, and vision insurance, with Health Savings or Flexible Spending Plan options.
Voluntary life, critical illness, accident, and long-term care insurance options.
Group term life, short-term disability, and long-term disability coverage for qualifying employees.
401(k) match.
Competitive PTO plan that increases quickly with years of service.
Holiday schedule and other leave programs, including bereavement, jury duty, and military duty leave.
Mental health awareness programs.
Tuition reimbursement.
Professional development reimbursement.
Recognition and awards programs.