Principal OT Cybersecurity Infrastructure Engineer

About the role

Hitachi Rail is looking for a Principal OT Cybersecurity Infrastructure Engineer based in Sydney, Australia. The role combines ownership of security architecture with hands-on engineering, covering railway and other critical-infrastructure projects. It spans the full lifecycle, from concept and detailed design through testing, commissioning, operational handover and ongoing assurance.

Key responsibilities

• Define end-to-end, vendor-agnostic OT cybersecurity architectures using zones and conduits, defence in depth, secure segmentation, high availability and resilient design.
• Establish reusable technical standards, reference architectures and integration patterns across projects and regions.
• Lead design, configuration, integration and validation of network and perimeter security, identity and access management, threat detection, SOC-enabling technologies, data protection, cyber recovery and secure core IT/OT infrastructure.
• Translate IEC 62443, CLC/TS 50701, NIST and ISO requirements into practical controls and maintain traceability from requirements and risk assessments through to assurance evidence.
• Define and run security FAT and SAT, hardening and configuration checks, functional control tests and integration tests with OT subsystems, and support vulnerability reviews, remediation and Security Case inputs.
• Coordinate with OT, network, systems, SOC, vendor and systems-integration teams, plan technical work, manage dependencies and report progress.
• Adapt designs to Australian critical-infrastructure, cybersecurity, data-protection and logging obligations, mentor engineers and influence multidisciplinary design decisions.

Required profile

• Engineering degree enabling full membership to Engineers Australia, or a Bachelor's degree in cybersecurity, computer science, information technology, telecommunications engineering, automation or systems engineering (a Master's is desirable).
• At least five years of professional experience in IT/OT cybersecurity infrastructure, including architecture and deployment.
• Demonstrated delivery experience in railway, transportation, energy, utilities, oil and gas or another critical-infrastructure environment.
• Hands-on experience designing, configuring, integrating, testing and commissioning cybersecurity platforms and controls.
• Experience applying CLC/TS 50701 in railway projects and adapting to Australian regulatory obligations; engagement with assurance stakeholders, assessors, regulators, vendors and integrators is desirable.

Required skills

• Practical application of IEC 62443, including zones and conduits, defence in depth and security levels.
• Experience producing architecture, configuration, hardening, test, assurance and handover documentation.
• Desirable certifications: CISSP, CISM or CRISC; GIAC GICSP, GRID or GCIP; IEC 62443 cybersecurity certification.

What we offer

• Annual performance, development and salary review.
• Ongoing professional development and training, and salary continuance.
• Health and wellbeing initiatives, including flu vaccinations, and an Employee Assistance Program.
• Sponsored days off per year in addition to statutory public holidays and leave.
• Invitation to company-sponsored social events.