Sr. Cybersecurity OT SME

Amyx, Inc.•Washington, DC

6d•Onsite

About The Position

We are seeking a Cyber Security SME with deep expertise in Operational Technology (OT) security for water and wastewater utilities. This role will lead cybersecurity strategy, architecture, and risk management for industrial control systems (ICS), SCADA networks, and process automation systems critical to water infrastructure. The SME will ensure compliance with federal standards, improve resilience against cyber threats, and support EPA and utility partners in safeguarding public health and environmental resources.

Requirements

10+ years in cybersecurity
8+ years in OT/ICS security for water utilities or critical infrastructure.
Hands-on experience with SCADA platforms (e.g., Wonderware, Ignition, OSIsoft PI).
Hands-on experience with OT protocols (Modbus, DNP3, OPC-UA).
Hands-on experience with passive monitoring tools (Nozomi, Claroty, Dragos).
Strong knowledge of NIST SP 800-82, ISA/IEC 62443, and RMF.
U.S. Citizenship; Public Trust eligibility.

Nice To Haves

Bachelor’s in Cybersecurity, Engineering, or related field.
Certifications: GICSP, CISSP, GRID, ISA/IEC 62443.
Experience with EPA programs, water/wastewater operations, or municipal utilities.

Responsibilities

Develop and implement security architectures for water utility OT environments (SCADA, PLCs, RTUs, HMIs).
Design segmentation strategies (Purdue Model, DMZ, secure remote access).
Integrate OT telemetry into enterprise SOC/SIEM for threat detection.
Conduct OT risk assessments for water/wastewater systems.
Align with NIST SP 800-82, ISA/IEC 62443, and EPA cybersecurity guidance.
Prepare and maintain System Security Plans (SSPs), POA&Ms, and RMF documentation.
Develop OT-specific incident response playbooks and tabletop exercises.
Support forensic analysis and recovery planning for cyber-physical systems.
Collaborate with water utility operators, engineers, and EPA program leads.
Deliver executive briefings and technical reports on OT cyber posture.
Must have the ability to communicate accurate information.