Become part of a winning team and help to deliver the Green Energy transition.
At GE Grid Solutions we are electrifying the world with advanced grid technologies. As leaders in the energy space our goal is to accelerate the transition for a more energy‑efficient grid that fully meets the needs of tomorrow. With a focus on growth and sustainability, GE Grid Solutions plays a pivotal role in integrating renewables onto the grid and driving toward carbon neutrality. Our advanced product and solutions portfolio is the most comprehensive within the sector.
What We Offer
Working in an international environment with secure remote‑access architectures using VPN and PKI technologies. You will be part of the Global Engineering HVDC Centre of Excellence within Grid Integration based in Stafford. A key role in a dynamic, international team with a high degree of flexibility of work agreements, you will define sub‑station LAN networks and ensure cybersecurity compliance for the HVDC Substation Automation Systems.
You will work on several large global projects involving multiple stakeholders; knowledge of various cybersecurity standards is essential. Lead the design of secure networks and communication architectures of the HVDC Control System from concept to commissioning based on the principles set out in IEC 62443‑3‑3.
Responsibilities
* Lead the design of secure networks and communication architectures of the HVDC Control System from concept to commissioning based on IEC 62443‑3‑3.
* Act as the point of contact for all matters related to cybersecurity and networking in a project environment, including evaluating solutions of various third‑party suppliers interfacing to the control system.
* Support tendering teams during the bidding process for any cybersecurity and networking related requirements from customers; knowledge of EU NIS, NERC, and BDES is essential.
* Ensure the Secure Deployment Guides for the HVDC Control System and third‑party system interfaces are adhered to.
* Ensure the Security Assurance Plans are followed by all relevant project stakeholders throughout the project duration.
* Define IP address strategies for the complete control system.
* Perform hardening in a sub‑station environment.
* Share engineering information and promote open dialogue.
* Document technical data generated for the assigned projects and/or tasks in line with engineering policies and procedures.
* Assist site activities related to the installation and commissioning of the control system LAN network.
* Oversee testing and FAT witnessing of the Control System.
* Lead Network & Cybersecurity Engineer requirements.
* Lead the design, configuration and testing required to deliver on time and within defined budgets.
* Follow the department’s standard design practices, engineering reviews and guidelines.
Role Requirements
* Familiar with the patch management process to correct published vulnerabilities.
* Ability to map requirements between different cybersecurity standards.
Ability To
* Analyse and evaluate different cybersecurity and networking solutions.
* Justify solutions/analysis/evaluation in front of a customer and technical audience.
* Build functional infrastructure from the ground up (networking, virtualization, and server operating system configuration).
Knowledge Of
* Process for monitoring vulnerability publications.
* Documentation to be provided with the associated level of confidentiality.
* IEC 62443 standard, mainly parts 4‑1, 4‑2, 3‑3 and 2‑4.
* Virtualization platforms such as VMware, Hyper‑V and Proxmox.
* Industrial protocols (IEC 61850, IEC 101/104, PTP, OPC UA, DNP3, Modbus TCP/IP) and methods to diagnose/debug using Wireshark.
* Configuring server operating systems, e.g. Windows Server.
* Configuring next‑generation firewalls such as Fortinet.
* Intrusion detection systems such as Nozomi, Radiflow.
* Anti‑malware, patch management and disaster recovery tools.
* Network monitoring and management.
* Standard cyber topics such as VPN technologies, secure network access, endpoint security, and network infrastructure protection.
Qualifications & Experience
* Degree level qualification in communication engineering or related field.
* Advanced background in distributed control systems / sub‑station automation.
* Excellent background in designing and configuring sub‑station LANs, especially within an IEC 61850 environment.
* Knowledge of network security / hardening and cybersecurity best practices.
* Excellent knowledge of commonly used protocols such as OSPF, VRRP, LACP, SNMP, SSH, SFTP.
* Knowledge of industrial protocols (IEC 61850, IEC 101/104, PTP, OPC UA, DNP3, Modbus TCP/IP) and methods to diagnose/debug using Wireshark.
* Standard cyber topics such as VPN technologies, secure network access, endpoint security, and network infrastructure protection.
* Experience with GE Reason, Westermo, Meinberg products is advantageous.
Relocation Assistance Provided: No
Seniority level
Mid‑Senior level
Employment type
Full‑time
Job function
Information Technology
Industries
Electric Power Generation
#J-18808-Ljbffr