Sr Engineer OT Security

The Hershey Company

United States, Pennsylvania, Hershey

Dec 20, 2024

Sr Engineer OT Security

Posted Date:

Nov 23, 2024

Requisition Number:

123373

Job Location: Hershey, PA Preferred - open to remote

This position requires an openness to travel (including International) based on assignment (>50%).

Role Summary:

This position is for an Industrial Control System Network and Security Engineer in the Controls & Security Technology Solutions Group. This position will be primarily responsible for deploying asset inventory, Network Scanning, and other OT security Tools across Hershey OT networks. Also, this position will be heavily involved in deployment of patches and upgrades to existing OT systems.This individual will be required to maintain a high level of knowledge in various technologies such as Client/Server, Cluster Servers (VMs), Industrial Networking, Industrial Security Systems (Firewalls, Routers/Switches,VPNs), Industrial Network Protocols, and Industrial Internet of Things (IIoT).

Responsibilities:

70%

-- Support Deployment of OT Security Tools (Firewalls, Asset Inventory, Scanning)

-- Provide support for Digital Initiatives (Switches, DNS, Secure Remote Access)

-- Provide support for Industrial Control Systems Solutions (Servers/SCADAs, HMIs, OS, Patching Systems, Disaster Recovery, etc.)

-- Provide support for upgrades and virtualization of legacy systems.

20%

--Responsible for providing subject matter expertise (SME) for ICS technologies to ensure security, control reliability and data acquisition through ongoing collaboration with Manufacturing Operations, Plant Technical Assurance, IS Digital Manufacturing and Capital Project Delivery Teams.

--Auditing and maintenance of OT security policies.

--Provide ICS security awareness and standards training to engineering and manufacturing operations.

10%

Maintaining an up-to-date knowledge of the developments and trends in ICS technologies, IIoT/I4.0 and Cybersecurity for possible application in The Hershey Company to protect ICS assets and to accelerate our digital transformation. This is done through reviewing trade journals, participating in professional societies; attending trade shows and seminars consulting suppliers and partnering with other food manufacturing companies.

Qualifications:

Working Knowledge of:

Developing Industrial Control Systems suitable for implementation in a manufacturing facility within the commercialization timeline and budget
Security design process, defense-in-depth/breadth, engineering life cycle, information domains, cross domain solutions, identification, authentication, and authorization, system integration, risk management

Experience in the following:

Securing cross-domain IT/OT communications and pathways
Securing systems running ICS-related communications protocols (Ethernet/IP, OPC, MODBUS, Profinet, etc.) Data Formats
The incumbent must be willing to apply skills across a broad range of domains (ICS, OT and IT)

Some Experience in the following:

Design, specification, application, installation, configuration, programming and maintenance of Industrial Control Systems - which include: Robotics, AGVs, PLC's, Motion Control Systems, Fieldbus Networks, Industrial Control Networks and HMI/SCADA Systems.
PLC logic and integration of enterprise and control systems. Knowledge of S88 and S95 preferred
The incumbent must possess excellent oral and written communication skills, innovative and creative problem solving skills, ability and willingness to work in a team environment and work with limited supervision, and ability, willingness and demonstrated experience in accomplishing project related responsibilities within critical time restraints to meet corporate objectives.
Ability to apply personal integrity to drive best solution for the department and the company while providing the customer with a strong performing manufacturing system for the manufacture of our confectionary products.
Must be open to and comfortable with change.
Open to travel (including International) based on assignment (>50%).

Experience & Education:

BS Degree in Electrical Engineering, Electrical Engineering Technology or other engineering / engineering technology with expertise and experience in Industrial control systems
4+ years experience in automation solutions including industrial control networking & security.
Minimum of 2 years experience in Food Processing, Confectionery, Pharmaceutical or related industries preferred.
Experience in leading/supporting multiple projects is required.
Working knowledge of standard industry PLC and SCADA/HMI systems.
Advanced knowledge of Industrial Control Network architecture, servers, virtualization, data integration & data historians is essential.