Sr. Cybersecurity OT SME

Amyx, Inc.

About The Position

We are seeking a Cyber Security SME with deep expertise in Operational Technology (OT) security for water and wastewater utilities. This role will lead cybersecurity strategy, architecture, and risk management for industrial control systems (ICS), SCADA networks, and process automation systems critical to water infrastructure. The SME will ensure compliance with federal standards, improve resilience against cyber threats, and support EPA and utility partners in safeguarding public health and environmental resources

Requirements

10+ years in cybersecurity;
8+ years in OT/ICS security for water utilities or critical infrastructure.
Hands-on experience with:SCADA platforms (e.g., Wonderware, Ignition, OSIsoft PI).OT protocols (Modbus, DNP3, OPC-UA).Passive monitoring tools (Nozomi, Claroty, Dragos).
Strong knowledge of NIST SP 800-82, ISA/IEC 62443, and RMF.
U.S. Citizenship; Public Trust eligibility.

Nice To Haves

Bachelor’s in Cybersecurity, Engineering, or related field.
Certifications: GICSP, CISSP, GRID, ISA/IEC 62443.
Experience with EPA programs, water/wastewater operations, or municipal utilities.

Responsibilities

OT Cybersecurity Strategy
Develop and implement security architectures for water utility OT environments (SCADA, PLCs, RTUs, HMIs).
Design segmentation strategies (Purdue Model, DMZ, secure remote access).
Integrate OT telemetry into enterprise SOC/SIEM for threat detection.
Risk Assessment & Compliance
Conduct OT risk assessments for water/wastewater systems.
Align with NIST SP 800-82, ISA/IEC 62443, and EPA cybersecurity guidance.
Prepare and maintain System Security Plans (SSPs), POA&Ms, and RMF documentation.
Incident Response & Resilience
Develop OT-specific incident response playbooks and tabletop exercises.
Support forensic analysis and recovery planning for cyber-physical systems.
Stakeholder Engagement
Collaborate with water utility operators, engineers, and EPA program leads.
Deliver executive briefings and technical reports on OT cyber posture
Must have the ability to communicate accurate information