Sr. Cybersecurity OT SME

Amyx•Washington, DC

13h

About The Position

Overview We are seeking a Cyber Security SME with deep expertise in Operational Technology (OT) security for water and wastewater utilities. This role will lead cybersecurity strategy, architecture, and risk management for industrial control systems (ICS), SCADA networks, and process automation systems critical to water infrastructure. The SME will ensure compliance with federal standards, improve resilience against cyber threats, and support EPA and utility partners in safeguarding public health and environmental resources Responsibilities OT Cybersecurity Strategy Develop and implement security architectures for water utility OT environments (SCADA, PLCs, RTUs, HMIs). Design segmentation strategies (Purdue Model, DMZ, secure remote access). Integrate OT telemetry into enterprise SOC/SIEM for threat detection. Risk Assessment & Compliance Conduct OT risk assessments for water/wastewater systems. Align with NIST SP 800-82, ISA/IEC 62443, and EPA cybersecurity guidance. Prepare and maintain System Security Plans (SSPs), POA&Ms, and RMF documentation. Incident Response & Resilience Develop OT-specific incident response playbooks and tabletop exercises. Support forensic analysis and recovery planning for cyber-physical systems. Stakeholder Engagement Collaborate with water utility operators, engineers, and EPA program leads. Deliver executive briefings and technical reports on OT cyber posture Must have the ability to communicate accurate information

Requirements

10+ years in cybersecurity
8+ years in OT/ICS security for water utilities or critical infrastructure.
Hands-on experience with:SCADA platforms (e.g., Wonderware, Ignition, OSIsoft PI).OT protocols (Modbus, DNP3, OPC-UA).Passive monitoring tools (Nozomi, Claroty, Dragos).
Strong knowledge of NIST SP 800-82, ISA/IEC 62443, and RMF.
U.S. Citizenship
Public Trust eligibility.

Nice To Haves

Bachelor’s in Cybersecurity, Engineering, or related field.
Certifications: GICSP, CISSP, GRID, ISA/IEC 62443.
Experience with EPA programs, water/wastewater operations, or municipal utilities.

Responsibilities

OT Cybersecurity Strategy Develop and implement security architectures for water utility OT environments (SCADA, PLCs, RTUs, HMIs). Design segmentation strategies (Purdue Model, DMZ, secure remote access). Integrate OT telemetry into enterprise SOC/SIEM for threat detection.
Risk Assessment & Compliance Conduct OT risk assessments for water/wastewater systems. Align with NIST SP 800-82, ISA/IEC 62443, and EPA cybersecurity guidance. Prepare and maintain System Security Plans (SSPs), POA&Ms, and RMF documentation.
Incident Response & Resilience Develop OT-specific incident response playbooks and tabletop exercises. Support forensic analysis and recovery planning for cyber-physical systems.
Stakeholder Engagement Collaborate with water utility operators, engineers, and EPA program leads. Deliver executive briefings and technical reports on OT cyber posture Must have the ability to communicate accurate information