Network and Cybersecurity Lead Engineer, Offshore Solution

About the role

This role reports to the Automation Engineering Manager and acts as technical lead for all network and cybersecurity engineering activities in offshore assignments. It covers the design, implementation and securing of the 800xA-based ICSS and PMS network architecture from FEED through FAT, installation and commissioning. The position is onsite in Johor Bahru, Malaysia, within the Offshore Solutions business of the Automation Energy Industries EHouse division.

Key responsibilities

• Design and configure the OT/control system network architecture for 800xA ICSS and PMS with full redundancy, VLAN segmentation, firewall/DMZ, IP addressing and network time synchronization, in line with industry standards and project specs.
• Develop and maintain the Cybersecurity Design Specification and related documentation according to IEC 62443, covering defense-in-depth, security zones and conduits, RBAC, secure remote access, Windows hardening, antimalware, application whitelisting and patch management.
• Produce cybersecurity deliverables such as network architecture diagrams, security philosophy documents, risk registers, patch management plans, backup/restore procedures and hardening guidelines.
• Deploy and integrate OT intrusion detection and continuous threat monitoring solutions such as Claroty and Nozomi (or equivalent) for passive monitoring, asset inventory, anomaly detection and security event visibility.
• Ensure compliance with maritime cyber resilience requirements (IACS UR E26, UR E27, UR E22) in coordination with the assigned classification society (DNV, ABS, Bureau Veritas, ClassNK or Lloyd's Register).
• Take part in FAT and SAT activities, including network validation, cybersecurity verification testing and troubleshooting of network and security issues.

Required profile

• Bachelor's degree in Electrical, Electronics, Instrumentation or Computer Engineering.
• Minimum 8 years of experience in industrial network engineering and/or OT cybersecurity; exposure to DCS/ICSS platforms on offshore, marine or FPSO projects is strongly preferred.
• Solid understanding of OT cybersecurity standards and frameworks (IEC 62443, NIST CSF, ISA99) and familiarity with oil and gas cybersecurity specifications.
• Relevant certifications are a plus (CCNA/CCNP, GICSP, ISA/IEC 62443 Cybersecurity Certificate, CISSP or similar).

Required skills

• Hands-on experience designing industrial networks with Belden/Cisco switches, routers and firewalls in an ICSS/PMS environment.
• Knowledge of industrial protocols (Modbus TCP/RTU, OPC/OPC UA, PROFIBUS, PROFINET, Ethernet/IP) and virtualization technologies is advantageous.
• Familiarity with maritime cybersecurity requirements and classification society cybersecurity notations is a strong advantage.

What we offer

• Attractive remuneration with performance-based incentives.
• Medical and insurance coverage.
• Learning and development programs.
• Hybrid/flexible work practices.
• An inclusive, safety-driven workplace culture.