Operational Technology Compliance Engineer

Constellation Energy Generation, LLC.•Westbrook, ME

About The Position

The Generation OT Compliance Engineer performs advanced technical and engineering problem solving in support of power plant operations and serves as a technical resource and expert to engineers. The role makes technical decisions and applies detailed knowledge of its engineering discipline, industry codes, and regulations. It ensures Constellation meets applicable generation regulatory compliance requirements, including NERC CIP for medium-impact BES Cyber Systems and NERC Operations and Planning (O&P). The engineer works across Power, IT, Engineering, and Corporate Security to ensure compliance activities follow applicable procedures, standards, and requirements. The role develops and maintains a strong technical understanding of generation regulatory rules and participates in forums where they are discussed. It identifies improvement opportunities through assessments, recommends corrective actions for deficiencies, and supports cross-functional alignment of processes and procedures. The engineer implements NERC standards and related programs for medium- and low-impact BES Cyber Systems, performs or supports security patching and vulnerability assessments, prepares compliance documentation and evidence, and supports audits, cyber drills, and cyber events. It also initiates and tracks compliance work in the Work Management system and reports program performance and improvement information to leadership.

Requirements

Bachelor's degree in Chemical, Civil/Structural, Electrical, Industrial, or Mechanical Engineering.
Five years of technical experience or related engineering experience.
Maintain minimum access requirements, as applicable, and meet favorable medical examination and/or testing requirements in accordance with position duties.
Strong knowledge of industrial DCS, SCADA, OT cyber assets, and networking, with demonstrated ability to interface OT devices with industrial control systems.
Ability to communicate clearly orally and in writing and work effectively across business units, functional groups, multiple organizational levels, and external stakeholders.
Ability to multitask and work independently and with teams in a fast-paced, dynamic environment under deadline pressure.
Analytical, critical-thinking, and problem-solving skills, attention to detail, accuracy, follow-through, and independent decision-making ability.

Nice To Haves

Deep experience or expertise implementing ISO, NERC, and TSA Gas Standards and associated tasks for generation facilities.
Prior experience at power generation stations.
Ability to analyze, interpret, and determine compliance requirements associated with ISO, NERC, TSA Gas, Regional Standards, and related federal, state, and local licensing processes, procedures, and agencies.
Experience and knowledge of ISO, NERC, and TSA Gas Standards and associated tasks for generation facilities.
General knowledge and experience with regulations, guides, standards, codes, methods, and practices necessary to perform assignments in a specific discipline, across installations, or in services.
Five years of experience in any combination of generation plant, electric utility transmission, operations, regulatory, legal, or financial disciplines.

Responsibilities

Demonstrate a strong technical understanding of generation NERC regulatory rules and participate in forums where they are discussed.
Implement NERC standards, programs, processes, procedures, and best practices supporting Constellation's NERC CIP and O&P programs and medium- and low-impact BES Cyber Systems.
Perform security patching on in-scope cyber assets according to established procedures, conduct vulnerability assessments, and mitigate vulnerabilities as needed.
Review assigned NERC Standards Requirements and provide documentation and evidence that requirements and measures are met.
Communicate technical expertise to team members verbally and in writing through reports, procedures, and proposals.
Recommend corrective actions for identified inadequacies and align processes and procedures across teams to support continued compliance.
Apply knowledge of industrial DCS, SCADA, OT cyber assets, and networking, including interfacing OT devices with industrial control systems.
Initiate necessary NERC compliance work activities in the Work Management system, execute them using procedures, and track them with documented completion evidence.
Participate in compliance audits; plan, prepare, and execute audit tasks and support audit teams.
Participate in cyber drills and actual cyber events.
Provide analysis and support to leadership for the NERC Compliance program, including reporting on performance improvements, organizational initiatives, and compliance communications.
Identify and recommend continuous improvement initiatives through assessments.