Job description

Company Overview Check out this video and find out why our team loves to work here! Join Us! CDM Smith – where amazing career journeys unfold. Imagine a place committed to offering an unmatched employee experience. Where you work on projects that are meaningful to you. Where you play an active part in shaping your career journey. Where your co-workers are invested in you and your success. Where you are encouraged and supported to do your very best and given the tools and resources to do so. Where it’s a priority that the company takes good care of you and your family. Our employees are the heart of our company. As an employer of choice, our goal is to provide a challenging, progressive and inclusive work environment which fosters personal leadership, career growth and development for every employee. We value passionate individuals who challenge the norm, deliver world-class solutions and bring diverse perspectives. Join our team, and together we will make a difference and change the world. Job Description CDM Smith is seeking an Operational Technology (OT) Cybersecurity and Network Specialist who is a proven self-starter. The successful candidate is passionate about OT Cybersecurity, Industrial Networks, and Process Control Systems with a desire to further enhance their skills and our Automation practice. As a member of our team, this OT Automation Specialist will contribute to CDM Smith's mission by: • Independently developing OT networks with senior level oversight and guidance. • Creating basic to moderately complex control system architectures, network segmentation diagrams, detail drawings, and specifications with general direction. • Designing OT infrastructure, including SCADA servers, historians, virtualization hosts, domain services, patching architectures, secure remote access platforms, endpoint protection, data backup solutions, and industrial intrusion detection systems. • Developing IT/OT convergence solutions such as Microsoft Active Directory, virtualization server clusters, NextGen firewalls, multifactor authentication, Demilitarized Zones (DMZ). • Implementing industry regulations, standards, and frameworks such as NIST CSF, NIST 800-82, and ISA 62443, ensuring adherence to these requirements. • Applying risk ‑ based engineering judgment to balance cybersecurity, operability, maintainability, and lifecycle cost in OT system designs • Familiarity with best practices for managing and securing Windows-based environments. • Evaluating legacy OT systems and offering strategic recommendations for improvements, migrations, or replacements, considering criticality and risk. • Preparing design reports under limited supervision. • Reviewing basic to moderately complex level shop drawings consisting of cybersecurity project plans, network segmentation plans, firewall policies, control system components, and server or network rack layout diagrams. • Preparing OT Cybersecurity and Automation project budgets and construction cost estimates. • Preparing proposal sections and client presentations under general supervision. • Traveling nationally or internationally as required to project sites, client meetings, factory tests, and start-up of systems. • Performing other duties as required. #LI-LP2 #LI-HYBRID Skills & Abilities • U.S. Citizenship is required for this position due to federal contract requirements and/or eligibility for a U.S. government security clearance. • Intermediate knowledge of network technologies, including VLANs, routing, and Next-Generation Firewalls (NGFW). • Intermediate knowledge of Windows systems in OT environments, including domain membership strategies, patching constraints, antivirus/EDR considerations, and change control. • Intermediate knowledge of virtualization environments (e.g., VMware, Hyper-V). • Intermediate knowledge of cybersecurity principles relevant to OT industrial settings. • Fundamental understanding of SCADA (Supervisory Control and Data Acquisition) and DCS (Distributed Control Systems) configuration and implementation. • Familiarity with network protocols, architecture, and configuration, including Modbus, DNP3, EtherNet/IP, and OPC along with industrial network design considerations, including availability, determinism, multicast traffic (e.g., IGMP), and maintenance constraints. • Familiarity with industry regulations, standards, and frameworks such as NIST CSF, NIST 800-82, and ISA 62443, ensuring adherence to these requirements. • Understanding of cloud-based or edge computing solutions as they relate to OT systems. • Awareness of disaster recovery, business continuity, and system resilience planning in OT settings. • Strong communication skills both verbally and written with ability to communicate to a geographically diverse team and client base with varying knowledgebase. • Strong time management skills and ability to multi-task and prioritize assignments to meet schedules and budgets. • Client-facing experience and comfort presenting or leading discussions with multidisciplinary teams. • Enjoys mentoring junior staff and has ability to adapt to different learning styles. Qualifications • Bachelor’s degree in engineering, information systems, computer science, or related field. • 5 years of related experience. Equivalent experience may substitute for a degree. Domestic and/or international travel may be required. The frequency of travel is contingent on specific duties, responsibilities, and the essential functions of the position, which may vary depending on workload and project demands. Preferred Qualifications • Experience implementing or supporting the configuration of cybersecurity and network OT solutions. • CompTIA Security +, GIAC GICSP, ISC2 CISSP, ISA/IEC 62443 certification or ability to obtain within 6 months. • Sector-specific experience in water/wastewater, facilities, or transportation is a plus. • Familiarity with SCADA/ICS cybersecurity assessments and mitigation strategies. Amount of Travel Required 20% - 40% Driving Requirements An appropriate and valid driver's license is required. EEO Statement We attract the best people in the industry, supporting their efforts to learn and grow. We strive to create a challenging and progressive work environment. We provide career opportunities that span a variety of disciplines and geographic locations, with projects that our employees plan, design, build and operate as diverse as the needs of our clients. CDM Smith Inc. and its divisions and subsidiaries are an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, pregnancy related conditions, childbirth and related medical conditions, sexual orientation, gender identity or gender expression), national origin, age, marital status, physical or mental disability, veteran status, citizenship status, genetic information or any other characteristic protected by applicable law. Background Check and Drug Testing Information CDM Smith Inc. and its divisions and subsidiaries (hereafter collectively referred to as “CDM Smith”) reserves the right to require background checks including criminal, employment, education, licensure, etc. as well as credit and motor vehicle when applicable for certain positions. In addition, CDM Smith may conduct drug testing for designated positions. Background checks are conducted after an offer of employment has been made in the United States. The timing of when background checks will be conducted on candidates for positions outside the United States will vary based on country statutory law but in no case, will the background check precede an interview. CDM Smith will conduct interviews of qualified individuals prior to requesting a criminal background check, and no job application submitted prior to such interview shall inquire into an applicant's criminal history. If this position is subject to a background check for any convictions related to its responsibilities and requirements, employment will be contingent upon successful completion of a background investigation including criminal history. Criminal history will not automatically disqualify a candidate. In addition, during employment individuals may be required by CDM Smith or a CDM Smith client to successfully complete additional background checks, including motor vehicle record as well as drug testing. Massachusetts Applicants It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Additional Pay Range Information CDM Smith is committed to fair and equitable compensation practices. This pay range is a good faith estimate representative of all experience levels for the geographic location assigned to the position. In addition to geographic location, a candidate’s salary is determined by several other factors including, but not limited to, the role, function and associated responsibilities, relevant work experience, skills, required certifications, and education/training. Additional Compensation All bonuses at CDM Smith are discretionary and may or may not apply to this position. Visa Sponsorship Available No-We will not support sponsorship in the United States, i.e. H-1B or TN Visas for this position Agency Disclaimer All vendors must have a signed CDM Smith Placement Agreement from the CDM Smith Talent Acquisition Manager to receive payment for your placement. Verbal or written commitments from any other member of the CDM Smith Inc. and its divisions and subsidiaries staff will not be considered binding terms. All unsolicited resumes sent to CDM Smith Inc. and its divisions and subsidiaries and any resume submitted to any employee outside of CDM Smith Talent Acquisition Team will be considered property of CDM Smith. CDM Smith Inc. and its divisions and subsidiaries will not be held liable to pay a placement fee. Pay Range Max USD $167,731.00 Pay Range Min USD $95,846.00

Requirements

Must-haves

Company Overview
Check out this video and find out why our team loves to work here!
Join Us! CDM Smith – where amazing career journeys unfold.
As a member of our team, this OT Automation Specialist will contribute to CDM Smith's mission by:
Independently developing OT networks with senior level oversight and guidance.
Creating basic to moderately complex control system architectures, network segmentation diagrams, detail drawings, and specifications with general direction.
Developing IT/OT convergence solutions such as Microsoft Active Directory, virtualization server clusters, NextGen firewalls, multifactor authentication, Demilitarized Zones (DMZ).
Implementing industry regulations, standards, and frameworks such as NIST CSF, NIST 800-82, and ISA 62443, ensuring adherence to these requirements.
Applying risk ‑ based engineering judgment to balance cybersecurity, operability, maintainability, and lifecycle cost in OT system designs
Familiarity with best practices for managing and securing Windows-based environments.
Evaluating legacy OT systems and offering strategic recommendations for improvements, migrations, or replacements, considering criticality and risk.
Preparing design reports under limited supervision.
Reviewing basic to moderately complex level shop drawings consisting of cybersecurity project plans, network segmentation plans, firewall policies, control system components, and server or network rack layout diagrams.
Preparing OT Cybersecurity and Automation project budgets and construction cost estimates.
Preparing proposal sections and client presentations under general supervision.
Traveling nationally or internationally as required to project sites, client meetings, factory tests, and start-up of systems.
Performing other duties as required.
Skills & Abilities
U.S. Citizenship is required for this position due to federal contract requirements and/or eligibility for a U.S. government security clearance.

Nice-to-haves

Experience implementing or supporting the configuration of cybersecurity and network OT solutions.
CompTIA Security +, GIAC GICSP, ISC2 CISSP, ISA/IEC 62443 certification or ability to obtain within 6 months.
Sector-specific experience in water/wastewater, facilities, or transportation is a plus.
Familiarity with SCADA/ICS cybersecurity assessments and mitigation strategies.
Driving Requirements

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: jibe
Effort: medium

Benefits

Benefits detected in the listing.

Vision