Lead Network & Cyber Security Engineer Join GE Vernova to help deliver the Green Energy transition. Job Description Summary As part of GE Grid Solutions, you will define substation LAN Networks and ensure Cybersecurity compliance for HVDC Substation Automation Systems on large global projects. What we offer A dynamic international environment with flexible work agreements and opportunities to design secure networks and Communication Architectures of HVDC Control Systems from concept to commissioning based on IEC 62443-3-3. Responsibilities

Lead the design of secure networks and Communication Architectures of the HVDC Control System from concept to commissioning based on IEC 62443-3-3. Act as the point of contact for all matters related to cybersecurity and networking in a project environment. Support tendering teams during the bidding process for any cybersecurity and networking related requirements. Ensure the Secure Deployment Guides for the HVDC Control System and 3rd party system interfaces are adhered to. Define IP address strategies for the complete control system. Perform hardening in a substation environment. Document technical data generated for the assigned projects and/or tasks in line with engineering policies and procedures. Assist site activities relevant to the installation and commissioning of the control system LAN network. Oversee testing and FAT witnessing of the Control System. Lead design, configuration and testing required to deliver on time and within defined budgets.

Role Requirements

Analyse and evaluate different cybersecurity and networking solutions. Justify solution / analysis / evaluation in front of a customer and technical audience. Build functional infrastructure from the ground up (Networking, virtualization, and server operating system configuration). IEC 62443 standard, mainly parts 4‑1, 4‑2, 3‑3 and 2‑4. Virtualization platforms such as VMware, HyperV and Proxmox. Industrial protocols (IEC 61850, IEC 101/104, PTP, OPC UA, DNP3, Modbus TCP/IP) and methods to diagnose / debug using Wireshark. Configure server operating systems, i.e. Windows Server. Configure next generation firewalls such as Fortinet. Intrusion Detection Systems such as Nozomi, Dragos. Anti‑malware, patch management and disaster recovery tools. Network monitoring and management. Standard cyber topics such as VPN technologies, Secure Network Access, Endpoint Security, and Network Infrastructure Protection.

Desired Knowledge Of

The process for monitoring vulnerability publications. Documentation to be provided with the associated level of confidentiality. The patch management process to correct vulnerabilities published. Being able to map requirements between different cybersecurity standards.

Qualifications & Experience

Degree level qualification in Communication engineering or related field. Advanced background in Distributed Control Systems / Substation Automation. Excellent background in designing and configuring Substation LAN’s especially within an IEC61850 environment. Knowledge of Network Security / Hardening and Cybersecurity best practices. Excellent knowledge of commonly used protocols such as OSPF, VRRP, LACP, SNMP, SSH, SFTP. Experience with GE Reason, Westermo, Meinberg products is advantageous.

Additional Information Relocation Assistance Provided: No #J-18808-Ljbffr