Senior Control System Cybersecurity Engineer

Shape Tomorrow's Technology as a Senior Control Systems Cybersecurity Engineer!

Dewberry is on the lookout for a passionate Senior Control Systems Cybersecurity Engineer to join our team in Huntsville, AL. This is a unique opportunity to design, implement, and maintain robust cybersecurity measures for our clients' control systems. If you have a strong engineering background and a dedication to safeguarding critical infrastructure, we want to hear from you!

With over 10 years of experience specifically focused on OT cybersecurity solutions design, development, and deployment, you'll work closely with our cybersecurity team, control system engineers, project managers, and client facility managers, ensuring the security of vital building and industrial control systems. You'll bring your expertise in facilities engineering and cybersecurity to the forefront, applying innovative solutions that adapt cybersecurity measures to our built environment.

**This is a full-time, senior-level position within the iTAC Cybersecurity Services Team that offers the opportunity for growth and development within the company.

Bachelor's degree in a technical field such as Computer Engineering, Electrical Engineering, Mechanical Engineering, Cybersecurity, or Information Security System Engineering
• 10+ years of directly related experience in OT cybersecurity solutions
• One of the following certifications: Certified Information Systems Security Professional (CISSP), Global Industrial Cyber Security Professional (GICSP), or Certified Information Security Manager (CISM)

Dewberry is a leading, market-facing professional services firm with more than 60 locations and 2,500 professionals nationwide. What sets us apart from our competitors are our people. At Dewberry, we seek out exceptional talent and strive to deliver the highest quality of services to our clients. Whether you're an experienced professional or a new graduate, you'll have the chance to collaborate with the best and brightest and work on innovative and complex projects at the forefront of the industry. Our commitment to excellence stems from our personal integrity and from other defining attributes, which we call "Dewberry at Work," that have inspired our employees to be successful for more than a half-century.

• Providing network and system specification documentation deliverables to address cybersecurity vulnerabilities and the security controls necessary to mitigate the vulnerabilities to an acceptable level of risk through application of risk management framework concepts
• Participate in and lead project meetings and provide specification deliverables in coordination with other Dewberry team designers, implementers, architects, and engineers
• Serve as a cross-sector OT cybersecurity resource for Dewberry engineering project teams servicing critical infrastructure; this capability requires expertise in OT design, development, and deployment.
• Comprehensive knowledge of secure control systems design standards to include NIST 800-53, NIST 800-82, ISA-62443, UFC-4-010-06, and others as required by the client
• Lead, with direct contribution to, the creation of winning proposals
• Identify and consult with others on solutions to unusual, difficult, or complex tasks
• Leverage existing customer relationships inside the company to generate warm leads
• Prepare responses to RFIs and RFPs
• Reduce complex aspects of cybersecurity engineering to terms understandable to others
• Prepare fee estimates for cybersecurity design services for internal and external clients
• Lead communications with Government stakeholders and provide advisory support.
• Manage task deliverables, quality, and budgets for multiple ongoing projects
• Prioritize and balance competing project demands and conflicting project requirements
• Mentor junior Cybersecurity Design Engineers in the planning and execution of project tasks and conduct quality management reviews of cybersecurity designs
• Ability to work in teams and establish and maintain cross-functional and working relationships
• Ability to control behavior under situations involving pressure, conflict and uncertainty
• Travel, as needed and approved, to provide technical and analytical support in a designated region or specific installation.

• Bachelor's degree in a technical field related to the following: Computer Engineering, Electrical Engineering, Mechanical Engineering, Cybersecurity, or Information Security System Engineering
• Minimum of ten (10) years of directly related experience in OT cybersecurity solutions design, development, and deployment.
• Certification(s): One of the following: Certified Information Systems Security Professional (CISSP), Global Industrial Cyber Security Professional (GICSP), Certified Information Security Manager (CISM)
• Excellent communication skills, both written and verbal, to clearly articulate ideas for senior leadership as well as technical staff consumption.
• Extensive experience in reviewing comprehensive facility design plans and specifications related to low-voltage facility-related control systems, power distribution systems, industrial controls, and network architecture
• Highly motivated self-starter with the ability to work with minimum supervision on medium to large control system-centric projects
• Understanding of projects at the conceptual level and development of the corresponding control system cybersecurity engineering scope of work, budget, and schedule
• Proficient with Microsoft Office Suite of tools, including Word, Excel, and PowerPoint.

Preferred Experience & Skills:

• Experience working within DoD, U.S. Army Corps of Engineers, Naval Facilities Engineering Systems Command, Air Force Civil Engineer Center, Military Health System, and or Veterans Affairs Healthcare programs is a significant plus
• Experience in supporting Military Construction (MILCON) and Facilities Sustainment, Restoration, and Modernization (SRM) projects
• Direct hands-on experience in the design of control systems and development of project-level design specifications using DoD Standards & Criteria, specifically UFC 4-010-06 "Cybersecurity of Facility Related Control Systems" and UFGS 25 05 11 "Cybersecurity for Facility Related Control Systems."
• Comprehensive knowledge of DoD Cybersecurity Assessment & Authorization policies, practices, and toolsets.
• HVAC Control Systems experience to include experience with BACnet and LonWorks protocols
• Multiple control system types (PLC-based, DCS, BMS, and SIS)

Don't meet every single requirement? At Dewberry, we are dedicated to building a diverse and inclusive workplace for our employees. So if you're excited about this role, but your experience doesn't align perfectly with every qualification in the position description, we encourage you to apply anyways. You may just be the right candidate for this or other opportunities

*At this time, Dewberry will not sponsor a new applicant for work authorization.

*Dewberry is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, gender identity or sexual orientation.

*Only recipients of an offer of employment from Dewberry will be required to submit to a background screening, which may include, but is not limited to, employment verification, educational and other credential verification, driving record check, criminal background check, and an investigative consumer report. These screenings will be conducted by Dewberry's background vendor of choice and will be conducted in compliance with all applicable federal, state, and local law.

Notice to Third Party Recruiters: Dewberry only compensates job placement recruiters that have a valid Dewberry-approved written agreement in place for recruiting services. Dewberry does not compensate third party recruiters for unsolicited job placement candidate information.

#LI-JS1