Network and Systems Sr. Analyst, APC DCS

PBF Energy•Oregon, OH

2d•Onsite

About The Position

PBF Energy is seeking an Advanced Process Control (APC) DCS Network and Systems Sr. Analyst for its Toledo Refinery in Oregon, Ohio. The analyst will work with APC team members and Operations and Technical departments to administer, secure, and support the refinery’s industrial control system (ICS). The role provides network architecture guidance for capital projects; installs, maintains, and troubleshoots critical hardware and software; proactively monitors and responds to cybersecurity concerns; answers operational technology (OT) questions; and mentors less experienced engineers. The position reports directly to the Lead APC Engineer. The analyst owns process control network architecture, administers network infrastructure and Windows servers, and maintains system domains, accounts, policies, records, and security compliance. The role also coordinates with vendors and contractors, ensures connections and permissions follow ICS and cybersecurity best practices, supports backup and recovery and incident response, and helps strengthen cybersecurity across the facility. ICS changes must follow environmental, safety, and Process Safety Management requirements, including Management of Change. The analyst develops and delivers training for Operations and Maintenance teams as needed and participates in on-call duty approximately one week in five.

Requirements

Bachelor’s degree required.
At least 5 years of industry experience directly configuring and supporting servers and/or networks.
Demonstrated expertise in networking principles and information systems applications.
Strength in programming across multiple platforms.
Conversant with cybersecurity standards and methodologies, including NIST, ICS-CERT, NERC, ISA/IEC 62443, and ETSI.
Must acquire Microsoft Server Hybrid Administrator Associate certification (AZ-800 and AZ-801) within 12 months of hire.
Must acquire CompTIA Network+ (N10-009) and Security+ (SY0-701) certifications within 12 months of hire.
Must acquire Cisco Certified Network Associate (CCNA, 200-301) certification within 12 months of hire.
Ability to work as a team member and independently with little guidance, with effective communication and interpersonal skills.

Nice To Haves

Computer Science, Computer Engineering, or a related field.
Cisco networking, Microsoft Windows Server, and Honeywell DCS knowledge and experience.
On-premises experience; some virtual environment experience is beneficial.
CompTIA Cybersecurity Analyst (CySA+) certification.
Microsoft Cybersecurity Architect Expert (SC-100) certification.
Global Industrial Cyber Security Professional (GISCP) certification from SANS.

Responsibilities

Own process control network architecture, serve as the primary technical resource for ICS-related projects, align network modifications with best practices, and drive systemic improvements from concept through implementation.
Manage, configure, maintain, troubleshoot, and update network infrastructure and communications, including switches and firewalls, and understand data transfer and integration across network segments.
Administer Windows servers, including managing, configuring, maintaining, troubleshooting, and upgrading Windows operating systems and proactively monitoring system health.
Administer system domains by configuring accounts and policies, monitoring performance, maintaining system records and documentation, and supporting security and compliance.
Install, upgrade, troubleshoot, and maintain ICS hardware, software, and network configurations.
Coordinate with vendors and contractors on system upgrades, patches, and hardware and software maintenance, and verify compatibility.
Ensure connections, applications, and permissions comply with ICS, cybersecurity, and APC best practices.
Support ICS cybersecurity by maintaining backup and recovery capabilities and incident response plans, regularly assessing vulnerabilities, supporting periodic audits, and responding to OT threats.
Advise others on cybersecurity improvements addressing identified and emerging vulnerabilities in the base control platform, network, and off-platform interfaces.
Ensure ICS-related changes follow environmental and safety best practices and Process Safety Management programs, including Management of Change.
Develop and deliver training for Operations and Maintenance teams on process control applications and cybersecurity best practices as needed.
Participate in on-call duty approximately one week in five.
Work effectively as part of a team and independently with little guidance, using effective communication and interpersonal skills.