Operational Technology Security

Indigo Beam•Center Township, PA

1d•Onsite

About The Position

The contractor provides hands-on operational technology security maintenance to keep site OT assets running safely, reliably, and securely. The scope covers site assets in network Levels 1 to 3.5, including DCS, SIS, PLCs, HMIs, network infrastructure, backup systems, and supporting systems. The role executes and documents preventive and corrective maintenance across control, safety, server, endpoint, and network systems, following the site risk-based OT Security Maintenance Policy, asset-specific plans, vendor requirements, permits, and Management of Change (MOC) procedures. The contractor reports to the assigned OT Engineer and asset custodians and works with Operations, PACO / Control Systems, OT Security, IT, maintenance teams, and system vendors. The contractor executes assigned work but does not approve risk, changes, or vendor updates. Work is based in Monaca, Pennsylvania, with an immediate joining date and a stated duration of 6–12 months, contract-to-hire. The posting specifies visa-independent candidates and requires compliance with applicable site access, work authorization, and contract-firm requirements.

Requirements

Relevant experience supporting OT, industrial automation, control systems, or industrial infrastructure in a continuous-process or similarly safety-critical operating environment; typically five or more years in a related role.
Hands-on experience maintaining and troubleshooting Windows-based OT assets, PLC / DCS systems, industrial networks, and associated servers or applications.
Working knowledge of risk-based maintenance, cybersecurity fundamentals, patch and firmware lifecycle practices, account access reviews, backups, and change control in OT environments.
Ability to execute permitted work safely, follow detailed procedures and vendor instructions, document work accurately, and escalate issues without disrupting production or safety functions.
Strong coordination, written communication, troubleshooting, and recordkeeping skills across Operations, engineering, IT, OT security, maintenance, and external vendors.
Relevant technical degree, associate degree, or equivalent combination of technical training and practical OT experience.
Must meet applicable site access, work authorization, and contract-firm requirements.

Nice To Haves

Experience in petrochemical, chemical manufacturing, refining, LNG, or another continuous-process industry.
Experience supporting planned maintenance, turnarounds, commissioning, or outage execution in a live operating facility.
Vendor training or experience with DeltaV, Rockwell, industrial networking / firewalls, OT virtualization, system backups, endpoint protection, or OT asset / threat monitoring.
Familiarity with IEC 62443 concepts, OT asset inventories, SharePoint-based maintenance records, and permit / MOC workflows.
Experience with systems comparable to the site environment, which includes Emerson DeltaV / DeltaV SIS, Rockwell PLCs, Siemens control systems, GE Mark VIe, Woodward, SKF magnetic-bearing PLCs, Bently Nevada 3500, Prognost, Windows OT servers and endpoints, virtualization, industrial firewalls and switches, OPC and Modbus, PI System, backup / recovery tools, SolarWinds, Nozomi, and endpoint-protection platforms; candidates are not expected to know every platform.

Responsibilities

Plan and execute assigned OT maintenance according to asset criticality, maintenance schedules, the OT Asset Register, Backup Plan, vendor guidance, and operating windows.
Record preventive, corrective, and cybersecurity work in the OT Security SharePoint Maintenance Tracking Tool, including asset identification, dates, task details, findings, and personnel.
Report incomplete or abnormal work and escalate overdue tasks to the Asset Custodian and OT Security Site Process Focal Point (SPF).
Help defer work blocked by operating constraints to the next outage, document the reason, and apply temporary mitigations such as enhanced monitoring, limiting changes or remote access, and checking backup and failover readiness.
Obtain work permits, including Permit Vision questionnaires, and follow approved site access procedures.
Verify system and configuration backups, report failures, and support recovery checks.
Keep antivirus definitions current on Windows OT assets; escalate definitions more than a week out of date and validate the alerting mechanism quarterly when no alerts occur.
Perform patching at the specified intervals, confirming asset classification, vendor approval, operational impact, maintenance window, and MOC / permit before work; do not force restarts on process-control, safety, or continuous-production systems.
Review switch and firewall firmware at least every two years, or sooner when a critical vulnerability is reported.
Check control-system and PLC firmware with vendors at least annually and apply only vendor-approved changes and procedures.
Defer online updates that are not feasible to the next planned outage with documented risk acceptance and interim controls.
Review firewall rules for documentation, justification, and least privilege; remove obsolete rules through change management.
Inspect cabinets, panels, and racks for integrity, locking, water ingress, heat, and dust; record issues and follow up according to the specified inspection schedule.
Review user, service, and privileged accounts quarterly and flag inactive, default, shared, or expired vendor accounts for removal.
Review OT cyber-defense reports monthly and route relevant events to the OT Security team.
Maintain the non-SAP critical OT spares record and review it annually for condition, readiness, and firmware compatibility.
Track spare usage and coordinate early with vendors on long-lead items.
Troubleshoot OT hardware, software, network, backup, and endpoint issues, distinguishing operational faults from security events.
Make changes only under approved MOC, with testing, rollback, and documentation.
Coordinate impact assessments and maintenance windows with the Asset Custodian, PACO, Operations, OT Security, IT, and vendors.
Keep records and handover notes up to date and support outage and turnaround planning.