OT Engineer (Cybersecurity Consultant)

Stack

Responsibilities

• ▹Work independently on defined tasks and deliverables semi-autonomously, with technical support from the Principal Consultant
• ▹Support technical client-facing workshops and meetings with client OT engineers, IT teams, and technology stakeholders
• ▹Define OT network and security designs and architectures aligned with OT best-practice principles, including IT/OT boundary design and access control models
• ▹Support evaluation and selection of technically appropriate hardware and software, interpreting specifications for core technical requirements
• ▹Design with OT constraints in mind: availability, safety, legacy system dependencies, and change management realities
• ▹Produce technical documentation, including low-level designs, network architecture diagrams, data flows, and firewall rule specifications
• ▹Communicate design decisions, trade-offs, and dependencies clearly to technical and non-technical audiences
• ▹Manage own workload and task sequencing independently, escalating to the Principal Consultant for technical decisions
• ▹Track progress against deliverable milestones and flag risks or blockers early
• ▹Maintain clear documentation and audit trails across all artefacts
• ▹Work within project management processes including AGILE/SCRUM
• ▹Contribute to the development of reusable methodologies, templates, and technical standards
• ▹Support proposal development activities
• ▹Contribute to mentoring and upskilling junior team members

Requirements

• ▹Demonstrable experience of technical security delivery within OT/ICS environments, including network security and architecture design in operational environments
• ▹Understanding of OT environment constraints: availability-first priorities, legacy systems, change management limitations, safety-critical considerations
• ▹Strong understanding of network segmentation, IT/OT boundary design, traffic flow analysis, and OT security architectures
• ▹Familiarity with firewall design, switch configuration concepts, and virtualisation within OT or converged IT/OT environments
• ▹Strong documentation skills: able to produce clear, auditable documents

Nice to have

• ▹Demonstrable experience delivering network security activities and architecture designs for OT/ICS environments
• ▹Working knowledge of IEC62443 in real design delivery, particularly zones, conduits, and security levels
• ▹Familiarity with CIS and STIG policy standards
• ▹Familiarity with OT technologies (HMI, PLC, RTU, DCS, SCADA)
• ▹Familiarity with OT network protocols (IEC61850, DNP3, Modbus/TCP)
• ▹Experience with multiple firewall, switch, and virtualisation vendors in OT contexts
• ▹Familiarity with NIST SP 800-82 and NIST 800-53 frameworks
• ▹Experience supporting procurement or vendor evaluation processes
• ▹Awareness of zero-trust principles applied to OT network segmentation
• ▹Exposure to software-defined segmentation approaches for OT networks
• ▹OT-relevant certifications such as IEC 62443 Cybersecurity Expert, GICSP, GRID, or equivalent
• ▹Exposure to rail (TS50701), automotive (ISO/SAE 21434), or renewables (e.g. G99) sectors

Soft skills

What we offer

• ▹Flexible working
• ▹25 days holiday plus bank holidays, with the option to buy up to 5 additional days
• ▹Medicash & Critical Illness Scheme
• ▹Pension, life assurance, and Share Save Scheme
• ▹Community & volunteering programmes
• ▹Green Car Scheme
• ▹Cycle to work scheme
• ▹Special time off for major life events
• ▹Generous maternity and paternity leave, plus support for fertility treatments

About the company

NCC Group is a global cybersecurity consultancy serving critical national infrastructure clients (energy, water, manufacturing, rail) through its OT Engineering practice.