Operational Technology (OT) Cybersecurity and Network Specialist

CDM Smith • Denver, CO

9h • Hybrid

About The Position

CDM Smith is seeking an Operational Technology (OT) Cybersecurity and Network Specialist who is a proven self-starter. The successful candidate is passionate about OT Cybersecurity, Industrial Networks, and Process Control Systems with a desire to further enhance their skills and our Automation practice. As a member of our team, this OT Automation Specialist will contribute to CDM Smith's mission by independently developing OT networks with senior level oversight and guidance. They will create basic to moderately complex control system architectures, network segmentation diagrams, detail drawings, and specifications with general direction. The role involves designing OT infrastructure, including SCADA servers, historians, virtualization hosts, domain services, patching architectures, secure remote access platforms, endpoint protection, data backup solutions, and industrial intrusion detection systems. Developing IT/OT convergence solutions such as Microsoft Active Directory, virtualization server clusters, NextGen firewalls, multifactor authentication, and Demilitarized Zones (DMZ) is also a key responsibility. The specialist will implement industry regulations, standards, and frameworks such as NIST CSF, NIST 800-82, and ISA 62443, ensuring adherence to these requirements. Applying risk-based engineering judgment to balance cybersecurity, operability, maintainability, and lifecycle cost in OT system designs is crucial. Familiarity with best practices for managing and securing Windows-based environments is expected. The role includes evaluating legacy OT systems and offering strategic recommendations for improvements, migrations, or replacements, considering criticality and risk. Preparing design reports under limited supervision, reviewing basic to moderately complex level shop drawings consisting of cybersecurity project plans, network segmentation plans, firewall policies, control system components, and server or network rack layout diagrams are also part of the duties. The specialist will prepare OT Cybersecurity and Automation project budgets and construction cost estimates, as well as proposal sections and client presentations under general supervision. Traveling nationally or internationally as required to project sites, client meetings, factory tests, and start-up of systems is expected. Other duties as required will also be performed.

Requirements

• U.S. Citizenship is required for this position due to federal contract requirements and/or eligibility for a U.S. government security clearance.
• Intermediate knowledge of network technologies, including VLANs, routing, and Next-Generation Firewalls (NGFW).
• Intermediate knowledge of Windows systems in OT environments, including domain membership strategies, patching constraints, antivirus/EDR considerations, and change control.
• Intermediate knowledge of virtualization environments (e.g., VMware, Hyper-V).
• Intermediate knowledge of cybersecurity principles relevant to OT industrial settings.
• Fundamental understanding of SCADA (Supervisory Control and Data Acquisition) and DCS (Distributed Control Systems) configuration and implementation.
• Familiarity with network protocols, architecture, and configuration, including Modbus, DNP3, EtherNet/IP, and OPC along with industrial network design considerations, including availability, determinism, multicast traffic (e.g., IGMP), and maintenance constraints.
• Familiarity with industry regulations, standards, and frameworks such as NIST CSF, NIST 800-82, and ISA 62443, ensuring adherence to these requirements.
• Understanding of cloud-based or edge computing solutions as they relate to OT systems.
• Awareness of disaster recovery, business continuity, and system resilience planning in OT settings.
• Strong communication skills both verbally and written with ability to communicate to a geographically diverse team and client base with varying knowledgebase.
• Strong time management skills and ability to multi-task and prioritize assignments to meet schedules and budgets.
• Client-facing experience and comfort presenting or leading discussions with multidisciplinary teams.
• Enjoys mentoring junior staff and has ability to adapt to different learning styles.
• Bachelor’s degree in engineering, information systems, computer science, or related field.
• 5 years of related experience.
• Equivalent experience may substitute for a degree.
• Domestic and/or international travel may be required. The frequency of travel is contingent on specific duties, responsibilities, and the essential functions of the position, which may vary depending on workload and project demands.
• An appropriate and valid driver's license is required.

Nice To Haves

• Experience implementing or supporting the configuration of cybersecurity and network OT solutions.
• CompTIA Security +, GIAC GICSP, ISC2 CISSP, ISA/IEC 62443 certification or ability to obtain within 6 months.
• Sector-specific experience in water/wastewater, facilities, or transportation is a plus.
• Familiarity with SCADA/ICS cybersecurity assessments and mitigation strategies.

Responsibilities

• Independently developing OT networks with senior level oversight and guidance.
• Creating basic to moderately complex control system architectures, network segmentation diagrams, detail drawings, and specifications with general direction.
• Designing OT infrastructure, including SCADA servers, historians, virtualization hosts, domain services, patching architectures, secure remote access platforms, endpoint protection, data backup solutions, and industrial intrusion detection systems.
• Developing IT/OT convergence solutions such as Microsoft Active Directory, virtualization server clusters, NextGen firewalls, multifactor authentication, Demilitarized Zones (DMZ).
• Implementing industry regulations, standards, and frameworks such as NIST CSF, NIST 800-82, and ISA 62443, ensuring adherence to these requirements.
• Applying risk‑based engineering judgment to balance cybersecurity, operability, maintainability, and lifecycle cost in OT system designs.
• Evaluating legacy OT systems and offering strategic recommendations for improvements, migrations, or replacements, considering criticality and risk.
• Preparing design reports under limited supervision.
• Reviewing basic to moderately complex level shop drawings consisting of cybersecurity project plans, network segmentation plans, firewall policies, control system components, and server or network rack layout diagrams.
• Preparing OT Cybersecurity and Automation project budgets and construction cost estimates.
• Preparing proposal sections and client presentations under general supervision.
• Traveling nationally or internationally as required to project sites, client meetings, factory tests, and start-up of systems.
• Performing other duties as required.

Benefits

• CDM Smith is committed to offering an unmatched employee experience.
• Challenging, progressive and inclusive work environment which fosters personal leadership, career growth and development for every employee.
• Tools and resources to do your very best.
• Company takes good care of you and your family.
• Career opportunities that span a variety of disciplines and geographic locations.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level