Senior Engineer - AMI Cybersecurity & OT

Overview

This senior engineering role focuses on securing Advanced Metering Infrastructure (AMI) systems including meters, gateways, Head End Systems (HES), Meter Data Management Systems (MDMS), and related networks. The position leads the application of cybersecurity controls compliant with standards like IEC 62443, DOE UAE, UAE IA, NIST, and ISO 27001, ensuring a secure architecture, public key infrastructure/key management systems, secure communication protocols, and active threat monitoring to protect system confidentiality, integrity, and availability.

Core Responsibilities

• Develop and maintain policies, processes, and controls aligned with company delegation of authority and legislative requirements to consistently deliver quality and cost-efficient services.
• Produce and submit timely reports and management updates in adherence to business policies and to support informed decision-making at senior levels.
• Lead the creation and continuous improvement of Operational Technology (OT) cybersecurity architectures and systems, providing expert guidance on threat detection and mitigation strategies for operational technology assets.
• Update policies, procedures, and cybersecurity tools specifically for OT environments.
• Serve as the central coordinator for AMI cybersecurity activities related to meters and field devices, collaborating closely with IT, OT, and external contractors.
• Implement secure communications for meters utilizing protocols such as DLMS/COSEM, TLS, VPN, and encryption, ensuring compliance with established standards.
• Coordinate with IT/OT teams to manage PKI/KMS systems, network security, and access controls related to meter integrations.
• Verify that newly onboarded meters and gateways have correct security configurations during deployment.
• Define and confirm secure data flows across the various communication layers between meters, gateways, and HES/MDMS.
• Enforce access control mechanisms including role-based access control (RBAC) and multi-factor authentication (MFA) for meter-related systems in partnership with IT.
• Monitor security events at the meter level, assist in Security Information and Event Management (SIEM) use cases, validate logs, conduct preliminary incident analysis, and integrate with Security Operations Centers (SOC).
• Participate in risk assessments, vulnerability identification, security reviews, and audits for AMI field equipment.
• Detect cyberattacks and intrusions, planning prevention and remediation measures proactively.
• Support incident response efforts in collaboration with IT/OT teams focusing on meter cybersecurity issues.
• Work with vendors and contractors to ensure their compliance with cybersecurity standards during deployment and ongoing operations.

Health, Safety, and Environmental (HSE), Security & Risk Obligations

• Adhere strictly to all HSE, security, and risk management rules and procedures issued by the company.
• Maintain personal health and safety while also ensuring that actions do not adversely affect others.
• Collaborate fully with the employer regarding HSE and security instructions or interventions.
• Report any hazards, risks, or security incidents promptly to management if unable to rectify personally.
• Report all workplace health and safety incidents, injuries, or security breaches.
• Refrain from misusing or tampering with safety, security, or welfare resources provided at work.

Candidate Profile & Qualifications

• A Bachelor’s degree in engineering or information technology is required.
• Minimum of eight years’ pertinent experience, especially in AMI and smart metering systems including meters, HES, MDMS, and gateways.
• Strong hands-on familiarity with OT cybersecurity standards such as IEC 62443, NIST frameworks, and ISO 27001.
• Certifications in Information & Cyber Security (e.g., CIA, CISA, CISSP, IEC 62443, SANS GISCP, CISM) are preferred.
• Technical expertise in secure communication protocols like DLMS/COSEM, TLS, VPN, and encryption technologies, plus PKI/KMS/HSM for key management.
• Experience in telecom-integrated AMI systems using M2M/APN, MPLS, and utility-scale deployments.
• Knowledge of cloud-centric OT/AMI architectures, hybrid cloud environments, and secure integration approaches.