OT Security Engineer

Solaris Oilfield Infrastructure, LLC•Houston, TX

About The Position

Solaris Energy Infrastructure is building networked power generation and distribution assets across multiple customer sites. Site networks connect turbine and balance-of-plant equipment, with SCADA running on Ignition and protection and control systems using SEL devices connected through SEL software-defined networking. The environment is being designed and deployed now, providing an opportunity to incorporate security as systems are built. The OT Security Analyst will help design secure operational technology systems during site construction and continuously validate and monitor deployed systems. This newly created role reports directly to the SVP of Information Technology and works as a peer to the enterprise Cybersecurity Analyst. The role partners closely with Engineering and IT Systems, bringing security requirements, standards, and risk perspectives into design while remaining accountable for the security posture of deployed systems. The position is responsible for creating an OT security program and standards. Responsibilities include designing and reviewing secure site networks and SDN flow policies; developing OT network segmentation architecture and system hardening baselines; establishing secure remote access; evaluating security tooling; maintaining OT asset visibility; conducting risk-based vulnerability management and monitoring; auditing deployed sites for configuration drift; supporting OT incident response; producing SOX ITGC audit evidence; maintaining OT security documentation aligned with IEC 62443 and NIST CSF; and advising on customer security reviews, equipment, and vendors.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Engineering, or a related technical field, or equivalent practical experience.
At least 4 years of cybersecurity experience, including a minimum of 2 years hands-on in operational technology, industrial control systems, or SCADA environments.
Demonstrated experience designing or reviewing segmented industrial networks, including the Purdue reference model and zone/conduit architecture.
Working knowledge of industrial protocols such as Modbus, DNP3, OPC UA, or IEC 61850.
Experience with vulnerability management in environments where devices cannot be freely scanned, patched, or rebooted.
Hands-on comfort configuring and hardening industrial network equipment and firewalls.
Exceptional communication, problem-solving, and coalition-building skills.
Proactive ownership and ability to identify and remove obstacles across multiple ongoing tasks.
Independent and innovative thinking, adaptability, and willingness to consider novel solutions.
Collaborative approach, humility, strong character, and commitment to achieving full potential.

Nice To Haves

Hands-on experience with Ignition or a comparable modern SCADA platform.
Experience with SEL software-defined networking, including SEL-2740S or SEL-5056 flow controller, or comparable OT SDN environments.
Familiarity with SEL relays, SEL management tooling, or utility protection and control environments.
Background in power generation, utilities, energy infrastructure, or oil and gas.
GICSP, GRID, or ISA/IEC 62443 certification.
Experience with OT monitoring platforms such as Claroty, Nozomi, Dragos, or Tenable OT.
Experience with Rapid7 InsightVM or InsightIDR.
Prior hands-on engineering or operations experience in addition to security.

Responsibilities

Partner with Engineering and IT Systems on network design for new sites, incorporating security requirements early.
Contribute to SDN flow policy design and review to ensure flows are least-privilege, documented, auditable, and current.
Develop and maintain a scalable reference architecture for OT network segmentation.
Define hardening baselines for Ignition gateways, SEL device management, industrial switching, and OT endpoints.
Establish secure remote access for internal teams, OEMs, and third-party service providers, including authentication, session logging, and approval workflows.
Evaluate the current security stack against OT requirements and recommend tools to address gaps.
Build and maintain OT network visibility and asset inventory across operating sites.
Extend enterprise security tooling into OT where safe and recommend purpose-built platforms where passive or protocol-aware monitoring is required.
Conduct continuous, risk-based vulnerability management for industrial assets using an operationally realistic remediation approach.
Monitor anomalous OT network activity; triage, investigate, and escalate findings.
Audit deployed sites against design standards and address configuration drift.
Maintain and exercise OT incident response playbooks and lead or support OT-involved incidents.
Produce audit evidence supporting SOX ITGC where OT systems touch financial reporting.
Maintain OT security policies and standards aligned with IEC 62443 and NIST CSF.
Support customer security questionnaires and contract security reviews.
Provide OT security input to Engineering and Operations on new equipment and vendor selection.