Senior Control System Cybersecurity Engineer

Dewberry•Huntsville, AL

About The Position

Shape Tomorrow’s Technology as a Senior Control Systems Cybersecurity Engineer! Dewberry is on the lookout for a passionate Senior Control Systems Cybersecurity Engineer to join our team in Huntsville, AL. This is a unique opportunity to design, implement, and maintain robust cybersecurity measures for our clients’ control systems. If you have a strong engineering background and a dedication to safeguarding critical infrastructure, we want to hear from you! With over 10 years of experience specifically focused on OT cybersecurity solutions design, development, and deployment, you'll work closely with our cybersecurity team, control system engineers, project managers, and client facility managers, ensuring the security of vital building and industrial control systems. You’ll bring your expertise in facilities engineering and cybersecurity to the forefront, applying innovative solutions that adapt cybersecurity measures to our built environment. This is a full-time, senior-level position within the iTAC Cybersecurity Services Team that offers the opportunity for growth and development within the company. Dewberry is a leading, market-facing professional services firm with more than 60 locations and 2,500 professionals nationwide. What sets us apart from our competitors are our people. At Dewberry, we seek out exceptional talent and strive to deliver the highest quality of services to our clients. Whether you’re an experienced professional or a new graduate, you’ll have the chance to collaborate with the best and brightest and work on innovative and complex projects at the forefront of the industry. Our commitment to excellence stems from our personal integrity and from other defining attributes, which we call “Dewberry at Work,” that have inspired our employees to be successful for more than a half-century.

Requirements

Bachelor's degree in a technical field related to the following: Computer Engineering, Electrical Engineering, Mechanical Engineering, Cybersecurity, or Information Security System Engineering
Minimum of ten (10) years of directly related experience in OT cybersecurity solutions design, development, and deployment.
Certification(s): One of the following: Certified Information Systems Security Professional (CISSP), Global Industrial Cyber Security Professional (GICSP), Certified Information Security Manager (CISM)
Excellent communication skills, both written and verbal, to clearly articulate ideas for senior leadership as well as technical staff consumption.
Extensive experience in reviewing comprehensive facility design plans and specifications related to low-voltage facility-related control systems, power distribution systems, industrial controls, and network architecture
Highly motivated self-starter with the ability to work with minimum supervision on medium to large control system-centric projects
Understanding of projects at the conceptual level and development of the corresponding control system cybersecurity engineering scope of work, budget, and schedule
Proficient with Microsoft Office Suite of tools, including Word, Excel, and PowerPoint.

Nice To Haves

Experience working within DoD, U.S. Army Corps of Engineers, Naval Facilities Engineering Systems Command, Air Force Civil Engineer Center, Military Health System, and or Veterans Affairs Healthcare programs is a significant plus
Experience in supporting Military Construction (MILCON) and Facilities Sustainment, Restoration, and Modernization (SRM) projects
Direct hands-on experience in the design of control systems and development of project-level design specifications using DoD Standards & Criteria, specifically UFC 4-010-06 “Cybersecurity of Facility Related Control Systems” and UFGS 25 05 11 “Cybersecurity for Facility Related Control Systems.”
Comprehensive knowledge of DoD Cybersecurity Assessment & Authorization policies, practices, and toolsets.
HVAC Control Systems experience to include experience with BACnet and LonWorks protocols
Multiple control system types (PLC-based, DCS, BMS, and SIS)

Responsibilities

Providing network and system specification documentation deliverables to address cybersecurity vulnerabilities and the security controls necessary to mitigate the vulnerabilities to an acceptable level of risk through application of risk management framework concepts
Participate in and lead project meetings and provide specification deliverables in coordination with other Dewberry team designers, implementers, architects, and engineers
Serve as a cross-sector OT cybersecurity resource for Dewberry engineering project teams servicing critical infrastructure; this capability requires expertise in OT design, development, and deployment.
Comprehensive knowledge of secure control systems design standards to include NIST 800-53, NIST 800-82, ISA-62443, UFC-4-010-06, and others as required by the client
Lead, with direct contribution to, the creation of winning proposals
Identify and consult with others on solutions to unusual, difficult, or complex tasks
Leverage existing customer relationships inside the company to generate warm leads
Prepare responses to RFIs and RFPs
Reduce complex aspects of cybersecurity engineering to terms understandable to others
Prepare fee estimates for cybersecurity design services for internal and external clients
Lead communications with Government stakeholders and provide advisory support.
Manage task deliverables, quality, and budgets for multiple ongoing projects
Prioritize and balance competing project demands and conflicting project requirements
Mentor junior Cybersecurity Design Engineers in the planning and execution of project tasks and conduct quality management reviews of cybersecurity designs
Ability to work in teams and establish and maintain cross-functional and working relationships
Ability to control behavior under situations involving pressure, conflict and uncertainty
Travel, as needed and approved, to provide technical and analytical support in a designated region or specific installation.