ICS Cybersecurity Engineer - Renewable Power

Company Overview

Air Products, a pioneering industrial gases corporation established in 1940, is dedicated to innovation, operational excellence, safety, and environmental responsibility. Our collective expertise fuels groundbreaking solutions in sectors ranging from space exploration to healthcare and large-scale production facilities.

Project Context

The NEOM Green Hydrogen Project represents one of the most intricate capital projects and a primary initiative for Air Products, encompassing engineering, procurement, and construction responsibilities in partnership with NEOM Green Hydrogen Company (NGHC). The project requires designing, building, and delivering process control, automation, and IT/digital technology infrastructures that strictly adhere to local cybersecurity laws and regulations, ensuring safety, security, and compliance.

Role Overview

The Cybersecurity Engineer position within the Renewable Power sector is a senior, highly skilled individual contributor role situated in the Project Cybersecurity Taskforce. The incumbent is responsible for ensuring cybersecurity compliance, resilience, and safe operation of power generation and transmission systems associated with expansive renewable energy assets, including Solar PV, Wind Turbines, Battery Energy Storage Systems (BESS), high- and medium-voltage substations, and grid connections.

Key Responsibilities

• Conduct field verification and validation of cybersecurity designs and implementations for renewable power generation and transmission assets, verifying adherence to Saudi and international cybersecurity standards.
• Ensure cybersecurity controls for systems like Solar PV plants, Wind Turbines, BESS, HV/MV substations, and grid interfaces, encompassing Power Plant Control (PPC) and Energy Management System (EMS) interfaces.
• Establish, update, and verify Operational Technology (OT) cybersecurity asset registers, network diagrams, zone-conduit models, and risk registers related to power systems.
• Lead and assist cyber risk assessments for power packages and original equipment manufacturer (OEM) skid systems; manage and track mitigation efforts with vendors and contractors until resolution.
• Support pre-commissioning and commissioning activities by validating firewall configurations, secure remote access, endpoint hardening, role-based access control, logging, and monitoring before system energization.
• Supervise and take part in Factory Acceptance Testing (FAT), Site Acceptance Testing (SAT), Cyber Security Acceptance Testing (CSAT), and performance tests for substation automation, turbine control, and plant SCADA systems.
• Coordinate actively with subcontractors and OEMs to regulate third-party system access, remote connectivity, and ensure cybersecurity compliance throughout construction and startup phases.
• Serve as the technical cybersecurity liaison among project execution, commissioning teams, OEMs, grid operators, and client representatives during field verification and commissioning.
• Assist in change management processes to verify cybersecurity implications of design, procurement, installation, and commissioning modifications are adequately reviewed and approved.
• Contribute to the handover of OT cybersecurity to operations, including development of procedures, governance of access controls, alignment on incident response, backup and recovery plans, and secure remote support frameworks.

Candidate Requirements

• Bachelor’s degree in engineering disciplines such as electronics and communication, instrumentation, or process automation, or an equivalent qualification.
• 10 to 15 years of experience in Operational Technology or related sectors, with at least 3 years concentrated on designing, constructing, or validating cybersecurity designs and implementations for industrial control systems and networks.
• Proven experience implementing Saudi cybersecurity standards including HCIS, NCA, as well as ISA 62443 industry standards, specifications, regulations, and best practices.
• Deep knowledge of control systems (SAS, SCADA, DCS, PLCs) and Wind Turbine systems, familiarity with protocols like Modbus, PROFINET, DNP3, IEC61850, and expertise in cybersecurity technologies such as firewalls, intrusion detection systems, antivirus tools, and vulnerability assessments within OT/ICS environments.
• Certification and accreditation in OT/ICS cybersecurity such as ISA/IEC62443, SANS, or comparable internationally recognized qualifications are preferred.
• Proficiency in Microsoft Office Suite tools including Teams, SharePoint, Word, Excel, PowerPoint, and Visio.
• Strong verbal and written communication skills capable of engaging effectively at all organizational levels.

Additional Information

This role is based in Duba, Tabuk Region, Saudi Arabia and operates on a rotation schedule of 8 weeks on-site followed by 2 weeks off. The position is primarily site-based, requiring close interaction with multiple stakeholders and technical teams throughout construction, commissioning, and startup phases.