The Role
Hands-on senior OT cybersecurity engineer/consultant delivering OT network/security architecture, low-level designs, firewall and segmentation specifications, client technical workshops, vendor evaluations, and project deliverables while mentoring junior staff and contributing to practice standards.
Summary Generated by Built In
We are looking for an experienced Senior OT Cybersecurity Consultant to join NCC Group’s fast-growing global OT Engineering practice focused on serving our critical national infrastructure clients across energy, water, manufacturing, rail etc. This is an opportunity to have an impact on the lives of millions of people every day through meaningful contribute directly to securing critical national infrastructure.
This is a hands-on technical delivery role where you will have opportunities to work on OT cybersecurity architecture, design and engineering projects. You will work semi-autonomously, owning deliverables end-to-end while reporting to the Principal Consultant for technical guidance, assurance, and alignment. You will need to operate confidently in technical workshops with client OT engineers, IT teams, and technology stakeholders.
Key Responsibilities
Technical delivery
- Ability to work independently on defined tasks and deliverables semi-autonomously, with technical support from the Principal Consultant
- Ability to support technical client-facing workshops and meetings with client OT engineers, IT teams, and technology stakeholders
- Ability to understand and define OT network and security designs and architectures aligned with OT best-practice principles, IT/OT boundary design, access control models, etc.
- Ability to support evaluation and selection of technically appropriate hardware, software & interpret specifications to identify core technical requirements
- Ability to design with OT constraints front-of-mind: availability, safety, legacy system dependencies, change management realities, and the operational impact of security controls
- Responsibility to produce technical documentation, including low-level designs, network architecture diagrams, data flows, firewall rule specifications
- Ability to communicate design decisions, trade-offs, and dependencies clearly to both technical and non-technical audiences when required
Workstream and Project Delivery
- Ability to manage your own workload and task sequencing independently, escalating to the Principal Consultant for technical decisions and assurance checkpoints
- Ability to track progress against deliverable milestones and flag risks or blockers early, independently liaising with the project manager on these
- Ability to maintain clear documentation and audit trails across all artefacts
- Ability to work within various project management processes, including but not limited to AGILE/SCRUM
Practice Development
- Contribute to the development of reusable methodologies, templates and technical standards within the practice
- Support proposal development activities, where required
- Identify opportunities to improve project delivery and efficiency, where relevant
- Contribute to mentoring and upskilling more junior members of the team
Skills, Knowledge and Expertise
- Demonstrable experience of technical security delivery within the OT/ICS environments (ideally including network security, architecture designs in operational environments, going beyond assessment, policy, or governance work)
- Understanding the constraints of OT environments (availability-first priorities, legacy systems, change management limitations, safety-critical considerations, and the practical realities of working around live environments)
- Strong understanding of network segmentation, IT/OT boundary design, traffic flow analysis, and OT security architectures
- Familiarity with firewall design, switch configuration concepts, and virtualisation within OT or converged IT/OT environments
- Strong documentation skills: able to produce clear, auditable documents
Desirable:
- Demonstrable experience of delivering network security activities & architecture designs for OT/ICS environments
- Working knowledge of IEC62443 applied in real design delivery, particularly zones, conduits, and security levels as applied in real-world design engagements
- Familiarity with CIS and STIG policy standards
- Familiarity with OT technologies (HMI, PLC, RTU, DCS, SCADA etc.)
- Familiarity with common OT network protocols (IEC61850, DNP3, Modbus/TCP etc.) at a network architecture level, Gateways, brokers and messaging formats
- Experience with multiple firewall, switch, and virtualisation vendors in OT contexts (vendor-agnostic perspective preferred over single-vendor depth)
- Familiarity with NIST SP 800-82 and NIST 800-53 frameworks
- Experience in supporting procurement or vendor evaluation processes
- Awareness of zero-trust principles applied to OT network segmentation
- Exposure to software-defined segmentation approaches for OT networks
- OT-relevant certifications such as IEC 62443 Cybersecurity Expert, GICSP, GRID, or equivalent
- Exposure to the following sectors: Rail (TS50701), Automotive (ISO/SAE 21434), Renewables (Grid Connection Standards eg. G99), Manufacturing or other similar OT environments
Benefits
We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits:
- Flexible Working: Balance your work and personal life with our flexible working options.
- Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave.
- Medicash & Critical Illness Scheme
- Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.
- Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.
- Green Car Scheme: Drive green and save money with our eco-friendly car scheme.
- Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme.
- Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.
- Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.
About
We assess, develop and manage cyber threats across our increasingly connected society. We advise global technology, manufacturers, financial institutions, critical national infrastructure providers, retailers and governments on the best way to keep businesses, software and personal data safe.With our knowledge, experience and global footprint, we are best placed to help businesses identify, assess, mitigate & respond to the risks they face.We are passionate about making the Internet safer and revolutionising the way in which organisations think about cyber security.Headquartered in Manchester, UK, with over 35 offices across the world, NCC Group employs more than 2,000 people and is a trusted advisor to 15,000 clients worldwide.
Skills Required
- Demonstrable experience of technical security delivery within OT/ICS environments
- Understanding OT constraints (availability-first, legacy systems, safety-critical, change management)
- Strong understanding of network segmentation, IT/OT boundary design, and traffic flow analysis
- Familiarity with firewall design, switch configuration concepts, and virtualization in OT or converged IT/OT environments
- Strong documentation skills (low-level designs, network diagrams, firewall rules, data flows)
- Ability to work independently on defined tasks and own deliverables semi-autonomously
- Ability to support and lead technical client-facing workshops with OT engineers and IT teams
- Ability to manage workload, track deliverable milestones, and work within project management processes (including AGILE/SCRUM)
- Experience delivering network security activities and architecture designs for OT/ICS environments
- Working knowledge or applied experience with IEC 62443 (zones, conduits, security levels)
- Familiarity with CIS and STIG policy standards
- Familiarity with OT technologies (HMI, PLC, RTU, DCS, SCADA)
- Familiarity with common OT network protocols (IEC61850, DNP3, Modbus/TCP) at network architecture level
- Experience with multiple firewall, switch, and virtualization vendors in OT contexts (vendor-agnostic perspective)
- Familiarity with NIST SP 800-82 and NIST 800-53 frameworks
- Experience supporting procurement or vendor evaluation processes
- Awareness of zero-trust principles applied to OT network segmentation and exposure to software-defined segmentation
- OT-relevant certifications such as IEC 62443 Cybersecurity Expert, GICSP, GRID, or equivalent
- Exposure to relevant sectors (Rail TS50701, Automotive ISO/SAE 21434, Renewables G99, Manufacturing)
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
NCC Group is a global cyber security and resilience company that helps organizations manage risk, strengthen resilience, and build trust. They provide services in cyber security consulting, managed services, technical assurance, and software escrow.
