Job ID #31763: Project Manager, SCADA and Operational Technology Security - RE-POST

City of Hamilton•Hamilton, ON

121d•CA$51 - CA$64•Onsite

About The Position

This role contributes to the City of Hamilton, one of Canada’s largest cities, known for its diverse economy, active community, vibrant culture, and natural beauty. The Project Manager SCADA & Operational Technology Security (SCADA/OT) analyzes, designs, develops, reviews, and manages security for all data, information, network, and infrastructure systems within the SCADA & operational technology landscape. This position directs the full life cycle of network and application security management. As an integral part of SCADA & operational technology projects and operations, the Project Manager provides insight, advice, and leadership for the development, implementation, and execution related to water and wastewater treatment facilities and outstations. The role involves providing expertise and direction in developing tender documents, consultant selections, budget preparation, scoping documents, and reviewing the development and implementation of security policies, procedures, and measures to ensure secure and reliable SCADA & Operational Technology systems, in compliance with privacy laws and regulations. The Project Manager must effectively communicate with various staff (operations, maintenance, cyber security, capital delivery, construction, planning, development) as well as contractors and consultants to resolve problems, execute project work, and develop policies, procedures, and specifications for SCADA/OT systems. The Project Manager may also be assigned to projects as a team member or lead, providing coaching on security processes, system reliability, and methods to staff.

Requirements

University Degree or College Diploma in Computer Science, Engineering Electrical, Computer Technology or related discipline.
Demonstrated experience in SCADA and Operational Technology (OT) infrastructure, networking, and security is required.
Working knowledge and experience in systems analysis, applications development, database design and administration.
Demonstrated technical knowledge of SCADA/OT client/server, network topology, and network/infrastructure security in industrial/manufacturing systems.
Strong knowledge and experience developing and implementing SCADA/OT security processes.
Working knowledge and experience in network traffic analysis.
Demonstrated ability in configuring and maintaining anti-virus software, firewalls, and intrusion detection systems.
Knowledge of network and infrastructure security issues, techniques, and implications across multiple computer platforms and environments.
Strong knowledge of legislative requirements for security and privacy.
Knowledge and understanding of project management principles.
Experience in client and web-based application development and user support environments, including experience working with client and web-based applications technology, preferably in a municipal environment.
Working knowledge of relational database management systems (e.g., SQL Server), the Microsoft suite of products including cloud-based systems, and proficiency in SQL (Structured Query Language) is required.
Understanding of one or more SCADA/OT programming and scripting languages commonly used in SCADA/OT applications (e.g., GE fix, RS studio, SQR, SQL, Visual Basic, VBScript, HTML, ASP, C#.Net and VB.Net).
Knowledge of NIST standards.
Must be able to communicate effectively, both orally and in written form.
Demonstrated ability to work effectively independently and as part of a team.
Proven leadership, analytical, and problem-solving abilities.
Ability to make sound and logical judgments.
Strong interpersonal, customer service skills, written, and oral communication skills.
Must possess a Class G Driver’s Licence.

Nice To Haves

Familiarity with artificial intelligence technologies—particularly large language models (LLMs)—and their implications, threats, and applications in cybersecurity is also highly desirable.

Responsibilities

Defines, develops, and implements security policies and procedures, including user log-on and authentication rules, security breach escalation procedures, use of firewalls, and encryption routines.
Defines and develops security risk analysis scenarios and response procedures in collaboration with SCADA/OT staff and IT security team.
Defines and implements processes and methods for auditing and addressing non-compliance to SCADA/OT standards and/or network security standards.
Enforces security policies and procedures by administering and monitoring security profiles, reviewing security violation reports, logs, and investigating possible security exceptions, updates, and maintains and documents security controls.
Directs the configuration and maintenance of anti-virus software, firewalls, intrusion detection systems, and other network security measures in collaboration with SCADA/OT staff and IT corporate security team.
Approves security patches and assists SCADA/OT staff in the deployment of approved patches.
Educates SCADA/OT staff and other business units on security policies and provides consultation/advice on security issues regarding custom-developed and packaged/managed systems.
Develops documentation and provides on-the-job training and coaching to SCADA/OT staff and other business units for security and technology topics.
Assists in the development, configuration, installation, and troubleshooting of industrial network communication systems (e.g., Modbus, Rs485, DeviceNet, BACnet) to ensure security standards are met.
Represents the security needs of SCADA/OT and its partner units by providing expertise and assistance in all SCADA/OT projects regarding security issues and system reliability.
Reviews system designs and architecture for potential risk areas and non-compliance and recommends methods to address security & reliability gaps.
Continually researches and maintains current knowledge on trends in software viruses and other attack/malware, preparing communications and instructions to the user community on new security and virus threats.
Maintains current knowledge and awareness of data, ministry of environment laws, and regulations; monitors the City’s SCADA/OT for compliance and recommends corrective action for non-compliance.
Performs periodic security assessments on all systems and networks as well as reviewing all networking initiatives for security compliance, analyzing results and providing recommendations.
Researches and evaluates SCADA/OT security products and/or procedures, identifies, recommends, and leads the adoption of those that will enhance/improve productivity and effectiveness of the City’s network, data, and application security.
May be assigned to an initiative or project requiring the individual to take direction from other managers.
May be required to provide on-call support to users.
May be required to work extended hours to complete system maintenance.
Works in accordance with applicable Health and Safety legislation and all City of Hamilton corporate and departmental policies and procedures related to Occupational Health and Safety.
Performs other duties as assigned, which are directly related to the major responsibilities of the job.