OT SME/Engineer/Expert in Newcastle upon Tyne

Role Summary

• Cyber Security Team is looking for an Expert with OT Knowledge and Back ground who can contribute towards the Encryption and Key Management Projects which includes HSM Implementation, Cyrpto, CLM and PKI for their OT environment.

The SME would be expected to:

KEY ACCOUNTABILITIES:

• OT/ICS environment expertise - Hands-on experience with power sector control systems (SCADA, DCS, RTUs, IEDs, HMIs) and familiarity with the Purdue Model (L0–L3.5) for network segmentation and asset criticality.

• OT protocol knowledge - Working knowledge of industrial protocols including DNP3 (and SAv5 secure authentication), IEC 61850 (GOOSE/MMS), Modbus, and IEC 62351 for securing power system communications.

• Change control & safety case awareness - Demonstrated experience operating within OT change management processes, maintenance windows, and safety case requirements - able to advise on deployment timing and operational risk.

• Regulatory/compliance familiarity - Working knowledge of NERC CIP, NCSC CAF, and IEC 62443-3-3 (SR requirements), and ability to translate compliance obligations into technical constraints for security tooling.

• HSM deployment & implementation support - Direct involvement or strong working knowledge of deploying hardware security modules into OT environments - network- attached (control centre) and ruggedized/edge (substation) form factors - including site environmental constraints, installation, and integration into live OT infrastructure (Phase 1 core focus).

• PKI integration with HSM-backed infrastructure - Understanding of CA architecture and certificate issuance/renewal processes, with the ability to support integrating a newly deployed HSM as the cryptographic root for existing or upgraded PKI, at device scale for IEDs/RTUs.

• Network segmentation & DMZ design input - Ability to advise on IT/OT boundary architecture and zone/conduit design for security tooling placed at or near OT networks.

• Site access & field engineering - Willingness and ability to work on/near substation and control-centre sites, including any required safety training, PPE certification, or site induction processes.

• Stakeholder liaison - Strong communication skills to act as the bridge between OT operations/engineering teams and the IT security/project delivery team throughout all three phases.

• POC and testing support - Experience supporting proof-of-concept testing of HSM deployment in OT lab or test environments, including validating performance, HA/failover, and network behaviour under representative conditions.

• Certificate lifecycle awareness - Understanding of certificate renewal, revocation, and lifecycle automation needs for OT device populations, to support Phase 3 (CLM) requirements gathering.

• Availability across full programme duration - Able to commit to intermittent, stage- gated involvement across all three phases, with flexibility around OT change windows that may extend engagement duration.