OT Infrastructure & Cybersecurity Lead

HF Sinclair•Tulsa, OK

4d•Hybrid

About The Position

The OT Infrastructure Specialist supports fleet-wide Operational Technology (OT) infrastructure used to operate industrial control systems across HF Sinclair sites. This position provides technical administration, troubleshooting, lifecycle support, documentation, backup and recovery, patch implementation, and project support for OT servers, endpoints, virtualization, networks, firewalls, and industrial control system infrastructure. The role reports to the OT Infrastructure & Cybersecurity Lead and coordinates closely with the OT Cyber Analyst, regional support teams, site OT teams, IT, vendors, and site stakeholders.

Requirements

At least 4 to 7 years of related experience in OT infrastructure, industrial control systems, process control systems, network administration, systems administration, or a combination of equivalent experience.
Experience supporting industrial control system environments, preferably Honeywell Experion PKS/FTE, Foxboro ICS, Siemens ICS, or similar distributed control system platforms.
Knowledge of Windows Server, endpoint operating systems, virtualization, Active Directory integration, backup and restore methods, networking, firewalls, and industrial Ethernet communications.
Experience supporting infrastructure in a refinery, pipeline, chemical, manufacturing, utility, or other industrial environment preferred.
Working knowledge of cybersecurity concepts as applied to OT environments, including system hardening, least privilege, change control, remote access control, patch management, vulnerability remediation, and incident response support.
Working knowledge of ISA/IEC 62443 principles preferred, especially as they relate to Industrial Automation and Control Systems (IACS), zones and conduits, secure system maintenance, and defense-in-depth.
Experience coordinating work with operations, maintenance, engineering, IT, vendors, and site leadership.
Ability to work calmly under pressure during system outages, abnormal operating conditions, or cybersecurity events.
Possesses effective communication skills and the ability to explain technical issues to both technical and non-technical audiences.
Acts with integrity, takes pride in work, demonstrates ownership, and seeks continuous improvement.
4-7 years of related OT infrastructure, industrial networking, systems administration, or control systems support experience required.
Familiarity with Honeywell Experion PKS/FTE, Foxboro ICS, Siemens ICS environments, or similar control system infrastructure preferred.
Knowledge of Windows Server, virtualization, endpoint administration, backups, networking, industrial firewalls, switches, and remote access technologies.
Ability to support fleet-wide sites with up to 40% travel by land or air.

Nice To Haves

ISA/IEC 62443 Cybersecurity Fundamentals, CompTIA Security+, Network+, Server+, Microsoft, VMware, Cisco, Fortinet, Palo Alto, Honeywell, Foxboro, or Siemens certifications are a plus.

Responsibilities

Administer, maintain, and support Operational Technology (OT) infrastructure systems across fleet locations, including servers, virtualization platforms, network devices, industrial firewalls, endpoint platforms, backups, and supporting services.
Provide advisory and hands-on technical support, as appropriate, for OT infrastructure associated with Honeywell Experion PKS/FTE, Foxboro ICS, Siemens ICS, and other Industrial Automation and Control Systems (IACS) environments, including centrally managed platforms, approved fleet standards, escalated site support, and infrastructure lifecycle activities.
Assist with implementation, configuration, and lifecycle management of OT infrastructure standards, including system hardening, configuration baselines, patching, backup schedules, and disaster recovery procedures.
Deployment, configuration, lifecycle management, administration, and ongoing support of centrally managed OT infrastructure platforms and fleet-wide support tools and applications used across supported OT environments.
Coordinate with refinery operations, maintenance, reliability, OT, IT, vendors, and contractors to support safe and reliable OT system operation.
Maintain and improve OT infrastructure asset records, network documentation, system diagrams, configuration records, backup records, and infrastructure support documentation. Support efforts to ensure centrally managed OT assets and support platforms are accurately documented, visible, and supportable through approved fleet tools and reporting processes.
Perform or coordinate approved OT infrastructure maintenance activities in accordance with change management, management of change, and site operating procedures.
Support the implementation of security updates, operating system patches, application patches, and firmware updates for OT systems where validated and approved by the business.
Monitor OT infrastructure health, availability, capacity, and performance; troubleshoot hardware, operating system, virtualization, network, and communication issues.
Support incident response activities by providing technical analysis, system recovery assistance, log collection, and infrastructure restoration support.
Assist with vulnerability remediation and corrective action activities identified by the OT Cybersecurity Analyst, OT Cybersecurity Specialist, audit findings, or risk assessments.
Participate in technical and non-technical projects requiring OT infrastructure support and cybersecurity oversight to ensure standards, policies, procedures, and site requirements are followed.
Support vendor access coordination and vendor maintenance activities in accordance with company remote access, cybersecurity, and safety requirements.
Provide fleet guidance and technical support for OT infrastructure reliability, availability, backup, patching, and lifecycle practices.
Maintain familiarity with ISA/IEC 62443 concepts related to zones and conduits, asset management, system hardening, patch management, backup and recovery, and secure maintenance of IACS environments.
Special assignments or tasks assigned to the employee by their supervisor, as determined from time to time in their sole and complete discretion.