Enbridge (Edmonton, Alberta)
Control Systems Security Specialist
Apply By April 04, 2018
Job Description
Provide operational support and technical expert advice for defining and implementing strategies regarding control system security, accessibility, and local area network (LAN) communication systems used in Enbridge's Liquids Pipeline Industrial Control System (ICS).
Job Responsibilities
Develop, deploy, and maintain field firewall policy for the Controls Network environment.
Manage and maintain field LANs, Control Systems security, and improvements required for pipeline system expansions and upgrades. Analyze and improve network performance.
Manage and maintain security appliances at each of the Liquids Pipeline control system sites.
Collaborate with other areas in IT to design, administer and maintain existing wide area network to meet the needs of the Controls Network infrastructure.
Directly manage/advise on implementing capital projects related to wide area and local area networks, security, cellular, satellite, Ethernet radio and backup communication systems.
Provide tier 3 technical support for the ongoing operation of installed LANs, security, satellite and backup communication system technologies. This includes recommending solutions to complex operational issues and coordinating activities with various stakeholder groups.
Provide on-call operational support for control systems security, accessibility, and LAN communication systems.
Lead or participate in failure analyses and investigations related to Enbridge’s network and related systems used in operations.
Identify opportunities for further enhancements and increased efficiency on the Enbridge network through on-going R&D, system commissioning, support and lessons learned analyses.
Establish working relationships with a broad cross-section of stakeholders within the company, equipment manufacturers, vendors, and services providers
Job Requirements
Required:
This role requires an overall 7 years of prior Information Technology(IT) or Operational Technology (OT) experience and a technical diploma or University degree from an accredited college or university in either computer science or engineering.
Minimum 5 years progressive experience designing, implementing and maintaining wide area and local area networks and security systems as well as significant knowledge in related technologies such as SCADA, Satellite and WAN networking systems.
Minimum 3 years progressive experience with developing and implementing firewall policy.
Working knowledge of Checkpoint security appliances and IPS security blade.
Strong knowledge and understanding of TCP/IP networking, network security, firewall technology, routing protocols, and switching technologies (VLANs, trunking, VTP, Spanning Tree)
Proficient in capturing and analyzing packets with tcpdump, wireshark or other common network analysis tools.
Proficient in the use of Cisco managed network switches and Cisco IOS.
Fundamental understanding of WAN technologies and protocols (MPLS and private line), OSI model, and routing protocols.
Working knowledge of industry and regulatory standards (API, IEC 62443, NIST 800-53 and 800-82, ICS-CERT).
Experience working in an industrial environment which has a regulatory requirement for management of change and risk analysis processes.
Proven ability to solve complex technical communications issues as they arise and make decisions with minimal supervision based on how a problem’s solution will impact the immediate problem and the system as a whole.
Proven ability to regularly shift between planned and unplanned activities, while remaining effective despite the resulting disruptive effects.
Proven ability to prioritize and manage multiple assignments and meet established deadlines while managing stakeholder expectations.
Proven ability to communicate effectively, both verbally and in written form. This includes the ability to effectively interact with peers, internal stakeholders and equipment vendors. Strong verbal and written communications abilities, including good spelling and grammar are essential for this position.
Proven ability to develop documented processes, procedures, standards and specifications.
Preferred:
Networking or Security professional certifications helpful (CCSA, CCSE, CCNA, CCIE, CISSP, CISA, CISM or related).
Fundamental knowledge of Check Point Multi Domain Environments, Reporter, IPS/IDS, and Logger systems.
Working knowledge of wireless radio communications.
Working knowledge in the use of industrial protocols such as Modbus, Modbus Plus, Modbus TCP/IP, CIP, etc
Experience designing, implementing and maintaining industrial Control Systems, including HMI’s, PLC’s, and other industrial end devices
How To Apply
Become a member
Learn about ISA Edmonton Section member benefits and sign-up to become a member online…
Read MoreISA
Insider
Knowledge is power. Sign-up for our ISA INSIDER e-newsletter and receive the latest news delivered directly to your inbox.