All open positions
BRL-TEC-04 · Technology, Software & Data
Lead, OT Cyber Security & SCADA Integration
Transmission & Grid Pune + project travel · Hybrid 10–14 years · Lead
Our plants, substations, storage systems and chargers are connected to control rooms, load despatch centres and our own software. You will own how they are connected and how they are protected, so that no operational asset can be reached, disrupted or misused through a network path we did not design.
Scope of work
- Own the reference architecture for SCADA, substation automation and plant control networks across all BARREL assets.
- Define the security zones, conduits and remote-access design for every new plant and substation from the design stage.
- Specify SCADA, RTU, gateway and firewall requirements in EPC and OEM tenders, and review vendor submissions.
- Lead factory and site acceptance testing of control and communication systems, including security tests.
- Integrate plant and substation data with load despatch centres and with BARREL OS through controlled data diodes or brokers.
- Run the OT vulnerability, patch and asset-inventory programme across operating sites.
- Prepare and drill the OT incident response plan with O&M teams, and report incidents within the mandated timelines.
- Prepare the organisation for cyber security audits required for power-sector entities.
- Train site engineers on secure operation, removable media control and remote-access discipline.
Technical description
- IEC 62443 series for zones, conduits, security levels and supplier requirements for industrial control systems.
- Substation and plant protocols: IEC 61850 (MMS, GOOSE), IEC 60870-5-104, DNP3, Modbus TCP and OPC UA.
- CEA cyber security guidelines and regulations for the power sector, and CERT-In directions on incident reporting.
- Guidance from NCIIPC and the sectoral CERTs on protecting critical information infrastructure.
- Industrial firewalls, unidirectional gateways, jump servers, privileged access management and network monitoring for OT.
- Time synchronisation (GPS, PTP) and its role in protection, disturbance records and event logs.
- ISO 27001 controls applied to the IT side, with a clear boundary to OT.
Commercial description
- Owns the OT security budget for tools, assessments and training, and justifies it in risk terms.
- Sets security clauses, acceptance criteria and liability terms in OEM, SCADA and EPC contracts with Procurement and Legal.
- Measured on audit findings closed, patch and inventory coverage, and zero unplanned outages caused by cyber events.
- Works with EPC project managers, O&M heads, OEMs, load despatch centres and auditors.
Skills required
- Designing and securing industrial control and SCADA networks in power or process plants.
- Hands-on configuration of industrial firewalls, switches and remote-access systems.
- Reading and writing SCADA and communication specifications for tenders.
- Running FAT and SAT for control and communication systems.
- Risk assessment and threat modelling for operational technology.
- Incident response, forensics basics and evidence handling.
- Writing clear procedures that site staff will actually follow.
- Working with OEMs to get secure configurations and patches without voiding warranties.
- Training and influencing engineers who do not report to you.
Talent we look for
- Thinks like an attacker and an operator at the same time.
- Calm and methodical during an incident.
- Firm on non-negotiable controls, practical on everything else.
- Comfortable on a substation floor as well as in a design review.
Qualifications
- B.E./B.Tech in Electrical, Electronics, Instrumentation or Computer Engineering.
- At least 5 years in OT or SCADA security for utilities, transmission, generation or process industries.
- IEC 62443 certification (for example ISA/IEC 62443 Cybersecurity Expert) or GICSP is strongly preferred.
- ISO 27001 Lead Auditor or Lead Implementer is an advantage.
More in Technology, Software & Data
BRL-TEC-01Head of Engineering, BARREL OSBARREL OS & Digital · Pune / Hybrid · 15–20 yearsView role BRL-TEC-02Senior Full-Stack Engineer, Power Trading ExchangeExchanges & Markets · Remote (India) · 6–10 yearsView role BRL-TEC-03Data Scientist, Renewable & Load ForecastingPower Generation · Pune / Hybrid · 3–6 yearsView role