*Role with Andor Tech (India) Pvt Ltd_ OT Cybersecurity Engineer*
Roles & Responsibilities :
Seeking a highly technical, hands-on OT Cybersecurity Engineer to secure customer’s Battery Energy Storage Systems (BESS).
The candidate will be directly responsible for evaluating security tools, hardening systems, and implementing the cybersecurity stack required to protect critical infrastructure in alignment with the IEC 62443 standard.
1. IEC 62443 Alignment:
1. Directly map, design, and implement security controls in compliance with IEC 62443-3-3, 4-1, & 4-2 standards.
i. Design, implement, and validate cybersecurity controls aligned with:
1. IEC 62443-3-3 (System Security Requirements & Security Levels)
2. IEC 62443-4-1 (Secure Product Development Lifecycle)
3. IEC 62443-4-2 (Technical Security Requirements for IACS Components)
2. Hands on configuration and deployment of security tools to meet product architecture requirements:
a. Identity & Access Management (IAM): Authentik (integrating RADIUS, LDAP, and SAML).
b. Centralized Logging:
Log capture pipeline using Rsyslog and Wazuh to aggregate events from host virtual machines, applications, and BESS hardware devices.
c. OT Vulnerability Management: Conduct OT-protected passive and active scanning/vulnerability assessments utilizing Tenable and Wazuh.
d. Backup Services: configure and validate backup policies and data preservation workflows in the internal DMZ (iDMZ) and OT zones using Bacula.
e. Endpoint Hardening: Execute host based hardening across operating systems (Ubuntu), Docker microservices, container networks, and physical network devices utilizing CIS Benchmarks and vendor recommended best practices
3. OT Protocol Security: MQTT, Modbus, and ZMQ
Qualifications and Experience:
• Bachelor's degree in Computer Science, Cyber Security, Engineering, or a related field.
• Relevant OT CyberSecurity Experience of 6-10 years
• Hands-on experience configuring Linux operating systems, deploying security agents, and exec