OT Security Engineer

Job Description

About the Opportunity

Solaris is building out networked power generation and distribution assets across multiple customer sites. Site networks reach down to turbine and balance-of-plant equipment, SCADA runs on Ignition, and protection and control includes SEL devices connected over SEL software-defined networking.

This environment is being designed and deployed now - which means security can be built in rather than retrofitted. That is the opportunity in this role.

As our OT Security Analyst, you will help design secure operational technology systems as sites are built, then continuously validate and monitor that what was designed is what is actually running. This is a newly created position reporting directly to the SVP of Information Technology and working as a peer to our enterprise Cybersecurity Analyst.

Design at Solaris is collaborative. You will work side by side with Engineering and IT Systems, bringing the security requirements, standards, and risk perspective to the table while remaining accountable for the security posture of what gets built. You will not inherit a mature program, you will create one.

Essential Functions

Secure by design

• Partner with Engineering and IT Systems on network design for each new site build, bringing security requirements into the design process early
• Contribute to SDN flow policy design and review, ensuring engineered flows are least-privilege, documented, auditable, and current as sites change
• Develop and maintain a reference architecture for OT network segmentation that scales across sites
• Define hardening baselines for Ignition gateways, SEL device management, industrial switching, and OT endpoints
• Establish secure remote access for internal teams, OEMs, and third-party service providers, including authentication, session logging, and approval workflow
• Evaluate the current security stack against OT requirements and recommend tooling to close identified gaps

Monitor and validate

• Build and maintain OT network visibility and asset inventory across all operating sites
• Extend existing enterprise security tooling into OT where safe, and recommend purpose-built platforms where passive or protocol-aware monitoring is required
• Run continuous vulnerability management against industrial assets using a risk-based, operationally realistic remediation approach
• Monitor for anomalous OT network activity; triage, investigate, and escalate
• Periodically audit deployed sites against design standards and close configuration drift

Respond and govern

• Maintain and exercise OT incident response playbooks; lead or support OT-involved incidents
• Produce audit evidence supporting SOX ITGC where OT systems touch financial reporting
• Maintain OT security policy and standards documentation aligned to IEC 62443 and NIST CSF
• Support customer security questionnaires and contract security reviews
• Provide OT security input to Engineering and Operations on new equipment and vendor selection

Qualifications

Experience/Education

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, or a related technical field, or equivalent practical experience
• 4+ years in cybersecurity, including a minimum of 2 years hands-on in operational technology, industrial control systems, or SCADA environments
• Demonstrated experience designing or reviewing segmented industrial networks, including the Purdue reference model and zone/conduit architecture
• Working knowledge of industrial protocols such as Modbus, DNP3, OPC UA, or IEC 61850
• Experience with vulnerability management in environments where devices cannot be freely scanned, patched, or rebooted
• Hands-on comfort configuring and hardening industrial network equipment and firewalls

Preferred

• Hands-on experience with Ignition or a comparable modern SCADA platform
• Experience with SEL software-defined networking (SEL-2740S, SEL-5056 flow controller) or comparable OT SDN environments
• Familiarity with SEL relays, SEL management tooling, or utility protection and control environments
• Background in power generation, utilities, energy infrastructure, or oil and gas
• GICSP, GRID, or ISA/IEC 62443 certification
• Experience with OT monitoring platforms such as Claroty, Nozomi, Dragos, or Tenable OT
• Experience with Rapid7 InsightVM or InsightIDR
• Prior hands-on engineering or operations experience in addition to security

Key Skills and Qualifications

• Exceptional communicator – direct and transparent, skilled problem-solver with proven success in building coalitions and avoiding conflicts
• Total ownership mentality – proactively identifies and removes obstacles across numerous ongoing tasks
• Independent thinker – provides original thoughts and constantly asking "how can we do this better"
• Innovative thinker – willingness to consider novel solutions and ability to adapt to change
• Desirable teammate – impeccable character, humility, and collaborative
• Relentless – aspires to contribute and achieve his/her full potential

Additional Information

Our CREATORS Culture
At Solaris, we believe that staying true to our core beliefs improves our decision-making, productivity and is key to our individual and collective achievements. Combining your innovative thinking with our core values that encourage Communication, Recognition, Entrepreneurship, Accountability, Teamwork & Transparency, Ownership, Results and Safety, we become CREATORS.

We value your hard work, integrity, and commitment to the Solaris “First in Service & Innovation” culture through competitive pay and benefits packages and ongoing career development.

• Competitive compensation packages
• Medical, Dental & Vision benefits
• Disability Insurance
• Company paid Life and AD&D insurance with supplemental offerings
• Company matching 401(k) retirement plan
• Paid time off, including 10 paid holidays
• Career Progression
• Tuition Reimbursement

This job overview is not all inclusive. In addition, Solaris reserves the right to amend this job overview at any time. Solaris is an Equal Opportunity Employer.

Why Solaris Join a company at the forefront of the energy infrastructure buildout powering data centers and industrial growth. We offer competitive compensation, benefits, and opportunities to grow alongside a high-performing team.

Pay Range: 5