OT Network Security Engineer

About the role

Hitachi Rail is looking for an enthusiastic, self-motivated OT Network Security Engineer for a full-time permanent position based in Brisbane, Australia. You will design, implement, integrate, optimise and validate network security and firewall infrastructure for railway and critical-infrastructure projects, acting as the technical go-to person for network security and firewalls from design through commissioning and handover.

Key responsibilities

• Design end-to-end OT network security architecture, including technical standards, reference architectures and design patterns
• Design, deploy, configure and validate Juniper firewalls covering network and perimeter security, network access and identity, threat detection and endpoint security, and IDS/IPS
• Produce and review security architecture documents, design justifications, configuration standards and hardening guides
• Define and run security FAT/SAT, hardening validation, functional tests and integration tests with OT subsystems
• Manage changes through CCR and CCBS and coordinate with cybersecurity, network and system engineers
• Ensure designs fit national cybersecurity regulations, critical infrastructure protection laws and data protection and logging constraints

Required profile

• Bachelor's degree in Cybersecurity, Computer Science, IT, Telecommunications, Automation, Electrical/Electronic Engineering or equivalent
• Preferred: existing RIW qualification or ability to obtain it
• Preferred: understanding of ETCS or rail environment experience
• Minimum 5 years of professional experience in IT/OT cybersecurity infrastructure, with responsibility for network security
• Ability to work onsite at customer premises around inner Brisbane

Required skills

• Strong hands-on experience with Juniper firewalls
• Troubleshooting: packet captures, log analysis, traffic flow tracing, root cause analysis
• Solid understanding of TCP/IP, routing, DNS, proxy, PKI and SSL/TLS inspection
• Highly regarded: IEC 62443, CLC/TS 50701, NIST 800-82/800-53, ISO 27001/27005

What we offer

• Annual performance, development and salary review
• Ongoing professional development and training
• Health and wellbeing initiatives, including flu vaccinations
• Employee Assistance Program
• Company-sponsored days off in addition to public holidays and leave
• Social events and mentoring opportunities