OT Engineer

Key Responsibilities

• Ability to work independently on defined tasks and deliverables semi-autonomously, with technical support from the Principal Consultant  
• Ability to support technical client-facing workshops and meetings with client OT engineers, IT teams, and technology stakeholders 
• Ability to understand and define OT network and security designs and architectures aligned with OT best-practice principles, IT/OT boundary design, access control models, etc. 
• Ability to support evaluation and selection of technically appropriate hardware, software & interpret specifications to identify core technical requirements  
• Ability to design with OT constraints front-of-mind: availability, safety, legacy system dependencies, change management realities, and the operational impact of security controls 
• Responsibility to produce technical documentation, including low-level designs, network architecture diagrams, data flows, firewall rule specifications 
• Ability to communicate design decisions, trade-offs, and dependencies clearly to both technical and non-technical audiences when required 

• Ability to manage your own workload and task sequencing independently, escalating to the Principal Consultant for technical decisions and assurance checkpoints 
• Ability to track progress against deliverable milestones and flag risks or blockers early, independently liaising with the project manager on these 
• Ability to maintain clear documentation and audit trails across all artefacts 
• Ability to work within various project management processes, including but not limited to AGILE/SCRUM 

• Contribute to the development of reusable methodologies, templates and technical standards within the practice 
• Support proposal development activities, where required 
• Identify opportunities to improve project delivery and efficiency, where relevant 
• Contribute to mentoring and upskilling more junior members of the team 

Skills, Knowledge and Expertise

• Demonstrable experience of technical security delivery within the OT/ICS environments (ideally including network security, architecture designs in operational environments, going beyond assessment, policy, or governance work) 
• Understanding the constraints of OT environments (availability-first priorities, legacy systems, change management limitations, safety-critical considerations, and the practical realities of working around live environments) 
• Strong understanding of network segmentation, IT/OT boundary design, traffic flow analysis, and OT security architectures 
• Familiarity with firewall design, switch configuration concepts, and virtualisation within OT or converged IT/OT environments  
• Strong documentation skills: able to produce clear, auditable documents 

• Demonstrable experience of delivering network security activities & architecture designs for OT/ICS environments  
• Working knowledge of IEC62443 applied in real design delivery, particularly zones, conduits, and security levels as applied in real-world design engagements 
• Familiarity with CIS and STIG policy standards 
• Familiarity with OT technologies (HMI, PLC, RTU, DCS, SCADA etc.) 
• Familiarity with common OT network protocols (IEC61850, DNP3, Modbus/TCP etc.) at a network architecture level, Gateways, brokers and messaging formats 
• Experience with multiple firewall, switch, and virtualisation vendors in OT contexts (vendor-agnostic perspective preferred over single-vendor depth) 
• Familiarity with NIST SP 800-82 and NIST 800-53 frameworks 
• Experience in supporting procurement or vendor evaluation processes 
• Awareness of zero-trust principles applied to OT network segmentation 
• Exposure to software-defined segmentation approaches for OT networks 
• OT-relevant certifications such as IEC 62443 Cybersecurity Expert, GICSP, GRID, or equivalent 
• Exposure to the following sectors: Rail (TS50701), Automotive (ISO/SAE 21434), Renewables (Grid Connection Standards eg. G99), Manufacturing or other similar OT environments

Benefits

• Flexible Working: Balance your work and personal life with our flexible working options. 
• Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave. 
• Medicash & Critical Illness Scheme 
• Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme. 
• Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities. 
• Green Car Scheme: Drive green and save money with our eco-friendly car scheme. 
• Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme. 
• Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet. 
• Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments. 

About
We assess, develop and manage cyber threats across our increasingly connected society. We advise global technology, manufacturers, financial institutions, critical national infrastructure providers, retailers and governments on the best way to keep businesses, software and personal data safe.With our knowledge, experience and global footprint, we are best placed to help businesses identify, assess, mitigate & respond to the risks they face.We are passionate about making the Internet safer and revolutionising the way in which organisations think about cyber security.Headquartered in Manchester, UK, with over 35 offices across the world, NCC Group employs more than 2,000 people and is a trusted advisor to 15,000 clients worldwide.