Senior Control System Cybersecurity Engineer

Dewberry is seeking a Senior Control Systems Cybersecurity Engineer to join our team in Huntsville, AL. The primary responsibility of this role is to be design, implement, and maintain cybersecurity measures for our clients' control systems. You will work closely with our cybersecurity team, control system engineers, project managers, and client facility managers to ensure the security of building and industrial control systems. The ideal candidate will have a passion for facilities engineering and cybersecurity, able to think outside the box when it comes to applying cybersecurity measures to the built environment. This is a full-time, senior-level position within the iTAC Cybersecurity Services Team that offers the opportunity for growth and development within the company.

Dewberry is a leading, market-facing professional services firm with more than 60 locations and 2,500 professionals nationwide. What sets us apart from our competitors is our people. At Dewberry, we seek out exceptional talent and strive to deliver the highest quality of services to our clients. Whether you’re an experienced professional or a new graduate, you’ll have the chance to collaborate with the best and brightest and work on innovative and complex projects at the forefront of the industry. Our commitment to excellence stems from our personal integrity and from other defining attributes, which we call “Dewberry at Work,” that have inspired our employees to be successful for more than a half-century

• Providing network and system specification documentation deliverables to address cybersecurity vulnerabilities and the security controls necessary to mitigate the vulnerabilities to an acceptable level of risk through application of risk management framework concepts
• Participate in and lead project meetings and provide specification deliverables in coordination with other Dewberry team designers, implementers, architects, and engineers
• Serve as a cross-sector OT cybersecurity resource for Dewberry engineering project teams servicing critical infrastructure; this capability requires expertise in OT design, development, and deployment.
• Comprehensive knowledge of secure control systems design standards to include NIST 800-53, NIST 800-82, ISA-62443, UFC-4-010-06, and others as required by the client
• Lead, with direct contribution to, the creation of winning proposals
• Identify and consult with others on solutions to unusual, difficult, or complex tasks
• Leverage existing customer relationships inside the company to generate warm leads
• Prepare responses to RFIs and RFPs
• Reduce complex aspects of cybersecurity engineering to terms understandable to others
• Prepare fee estimates for cybersecurity design services for internal and external clients
• Lead communications with Government stakeholders and provide advisory support.
• Manage task deliverables, quality, and budgets for multiple ongoing projects
• Prioritize and balance competing project demands and conflicting project requirements
• Mentor junior Cybersecurity Design Engineers in the planning and execution of project tasks and conduct quality management reviews of cybersecurity designs
• Ability to work in teams and establish and maintain cross-functional and working relationships
• Ability to control behavior under situations involving pressure, conflict and uncertainty
• Travel, as needed and approved, to provide technical and analytical support in a designated region or specific installation.

• Bachelor's degree in a technical field related to the following: Computer Engineering, Electrical Engineering, Mechanical Engineering, Cybersecurity, or Information Security System Engineering
• Minimum of ten (10) years of directly related experience in OT cybersecurity solutions design, development, deployment, and commissioning.
• Certification(s): One of the following: Certified Information Systems Security Professional (CISSP), Global Industrial Cyber Security Professional (GICSP), Certified Information Security Manager (CISM)
• Excellent communication skills, both written and verbal to clearly articulate ideas for senior leadership as well as technical staff consumption.
• Extensive experience in reviewing comprehensive facility design plans and specifications related to low voltage facility related control systems, power distribution systems, industrial controls, and network architecture
• Highly motivated self-starter with the ability to work with minimum supervision on medium to large control system centric projects
• Understanding of projects at the conceptual level and development of the corresponding control system cybersecurity engineering scope of work, budget, and schedule
• Proficient with Microsoft Office Suite of tools, including Word, Excel, and PowerPoint.

Preferred Experience & Skills:

• Experience working within DoD, U.S. Army Corps of Engineers, Naval Facilities Engineering Systems Command, Air Force Civil Engineer Center, Military Health System, and or Veterans Affairs Healthcare programs a significant plus
• Experience in supporting Military Construction (MILCON) and Facilities Sustainment, Restoration and Modernization (SRM) projects
• Direct hands on experience in the design of control systems and development of project level design specifications using DoD Standards & Criteria specifically, UFC 4-010-06 “Cybersecurity of Facility Related Control Systems” and UFGS 25 05 11 “Cybersecurity for Facility Related Control Systems”
• Comprehensive knowledge of DoD Cybersecurity Assessment & Authorization policies, practices, and toolsets.
• HVAC Control Systems experience to include experience with BACnet and LonWorks protocols
• Multiple control system types (PLC based, DCS, BMS, and SIS)

Don’t meet every single requirement? At Dewberry we are dedicated to building a diverse and inclusive workplace for our employee’s. So if you’re excited about this role, but your past experience doesn’t align perfectly with every qualification in the position description, we encourage you to apply anyways. You may just be the right candidate for this or other opportunities

*At this time, Dewberry will not sponsor a new applicant for work authorization.

*Dewberry is an Equal Opportunity/ Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, gender identity or sexual orientation.

*Only recipients of an offer of employment from Dewberry, will be required to submit to a background screening which may include, but is not limited to, employment verification, educational and other credential verification, driving record check, criminal background check, and an investigative consumer report. These screenings will be conducted by Dewberry’s background vendor of choice and will be conducted in compliance with all applicable federal, state, and local law.

Notice to Third Party Recruiters: Dewberry only compensates job placement recruiters that have a valid Dewberry-approved written agreement in place for recruiting services. Dewberry does not compensate third party recruiters for unsolicited job placement candidate information.