Operational Technology Security

Indigo Beam•Monaca, PA

20h•Onsite

About The Position

The OT Engineer / Contractor Support role is a hands-on operational technology security contractor position supporting site OT assets in network Levels 1 to 3.5. Assets include DCS, SIS, PLCs, HMIs, network infrastructure, backup systems, and supporting systems. The role focuses on executing and documenting preventive and corrective maintenance across control, safety, server, endpoint, and network systems so assets operate safely, reliably, and securely. The contractor plans and carries out maintenance according to asset criticality, schedules, the OT Asset Register and Backup Plan, vendor guidance, operating windows, permits, and the site risk-based OT Security Maintenance Policy. Work includes backup verification, antivirus and patch maintenance, firmware and network maintenance, physical inspections, access reviews, cyber-defense report routing, critical-spares tracking, troubleshooting, and change-control execution. The role requires accurate maintenance records, handover notes, escalation of abnormal or incomplete work, and coordination with site teams and vendors. The contractor reports to the assigned OT Engineer and asset custodians and works with Operations, PACO / Control Systems, OT Security, IT, maintenance teams, and system vendors. The contractor executes assigned work but does not approve risk, changes, maintenance deferrals, access authorization, or vendor updates; those approvals remain with designated site authorities and/or required vendors. The position is based in Monaca, Pennsylvania, with immediate joining requested. The engagement is described as 6–12 months, contract-to-hire.

Requirements

Relevant experience supporting OT, industrial automation, control systems, or industrial infrastructure in a continuous-process or similarly safety-critical operating environment; typically five or more years in a related role.
Hands-on experience maintaining and troubleshooting Windows-based OT assets, PLC / DCS systems, industrial networks, and associated servers or applications.
Working knowledge of risk-based maintenance, cybersecurity fundamentals, patch and firmware lifecycle practices, account access reviews, backups, and change control in OT environments.
Ability to execute permitted work safely, follow detailed procedures and vendor instructions, document work accurately, and escalate issues without disrupting production or safety functions.
Strong coordination, written communication, troubleshooting, and recordkeeping skills across Operations, engineering, IT, OT security, maintenance, and external vendors.
Relevant technical degree, associate degree, or equivalent combination of technical training and practical OT experience.
Must meet applicable site access, work authorization, and contract-firm requirements.

Nice To Haves

Experience in petrochemical, chemical manufacturing, refining, LNG, or another continuous-process industry.
Experience supporting planned maintenance, turnarounds, commissioning, or outage execution in a live operating facility.
Vendor training or experience with DeltaV, Rockwell, industrial networking / firewalls, OT virtualization, system backups, endpoint protection, or OT asset / threat monitoring.
Familiarity with IEC 62443 concepts, OT asset inventories, SharePoint-based maintenance records, and permit / MOC workflows.
Experience with systems comparable to the site environment, which includes Emerson DeltaV / DeltaV SIS, Rockwell PLCs, Siemens control systems, GE Mark VIe, Woodward, SKF magnetic-bearing PLCs, Bently Nevada 3500, Prognost, Windows OT servers and endpoints, virtualization, industrial firewalls and switches, OPC and Modbus, PI System, backup / recovery tools, SolarWinds, Nozomi, and endpoint-protection platforms.

Responsibilities

Plan and execute assigned OT maintenance based on asset criticality, maintenance schedules, the OT Asset Register, the Backup Plan, vendor guidance, and operating windows.
Record preventive, corrective, and cybersecurity work in the OT Security SharePoint Maintenance Tracking Tool, including asset details, dates, task information, findings, and personnel.
Report incomplete or abnormal work and escalate overdue tasks to the Asset Custodian and OT Security Site Process Focal Point.
When operating constraints prevent maintenance, help defer the work to the next outage, document the reason, and apply temporary mitigations such as enhanced monitoring, limiting changes or remote access, and checking backup and failover readiness.
Obtain work permits, including Permit Vision questionnaires, and follow approved site access procedures.
Verify system and configuration backups according to the OT Backup Plan, report failures, and support recovery checks.
Keep antivirus definitions current on Windows OT assets, escalate definitions more than a week out of date, and validate the alerting mechanism quarterly when no alerts occur.
Patch systems according to the specified schedule, confirming asset classification, vendor approval, operational impact, maintenance window, and MOC / permit requirements before patching; do not force restarts on process-control, safety, or continuous-production systems.
Review switch and firewall firmware at least every two years, or sooner if a critical vulnerability is reported.
Check control-system and PLC firmware with vendors at least annually and apply only vendor-approved changes.
Defer online updates that are not feasible until a planned outage, with documented risk acceptance and interim controls.
Review firewall rules for documentation, justification, and least privilege, and remove obsolete rules through change management.
Inspect cabinets, panels, and racks for integrity, locking, water ingress, heat, and dust; record and follow up on issues according to the specified inspection schedules.
Review user, service, and privileged accounts quarterly and flag inactive, default, shared, or expired vendor accounts for removal.
Review OT cyber-defense reports monthly and route relevant events to the OT Security team.
Maintain the critical OT spares record outside SAP, review it annually for condition, readiness, and firmware compatibility, track spare usage, and coordinate early with vendors on long-lead items.
Troubleshoot OT hardware, software, network, backup, and endpoint issues, distinguishing operational faults from security events.
Make changes only under approved MOC, with testing, rollback, and documentation.
Coordinate impact assessments and maintenance windows with the Asset Custodian, PACO, Operations, OT Security, IT, and vendors.
Keep records and handover notes current and support outage and turnaround planning.