Senior IT/OT/Cyber Security Engineer

About the role

Parsons is seeking a highly skilled Senior IT/OT/Cyber Security Engineer to lead the design, integration and implementation of secure IT and operational technology solutions for a large‑scale rail infrastructure project. You will shape cyber security strategies, network architecture and resilience across railway systems and ensure seamless, secure interfacing with multiple subsystems.

Key responsibilities

• Develop and implement IT, OT and cyber security strategies throughout all project phases.
• Create cyber security frameworks, policies, standards and compliance requirements for railway operational and enterprise systems.
• Design secure network architectures, communication zones and access controls for rail signalling, SCADA, OCC, telecommunications, rolling stock and passenger‑facing systems.
• Support systems engineering activities, including requirements, interface management, verification, validation and traceability.
• Prepare and review tender documentation with technical specifications, cyber security and resilience requirements.
• Conduct vulnerability assessments, risk analyses, penetration testing, disaster recovery planning and incident response procedures.
• Lead testing and commissioning activities (FAT, SAT, SIT, integrated testing) and ensure operational readiness.
• Coordinate with designers, contractors, operators and authorities to align technical and security requirements.

Required profile

• Extensive experience in IT, OT and cyber security within large infrastructure or rail projects.
• Strong knowledge of railway signalling (ATC/CBTC), SCADA, OCC and related subsystems.
• Proven ability to develop security frameworks and manage complex stakeholder interfaces.
• Experience with risk management, vulnerability assessment and incident response.

Required skills

• Network architecture and secure access control design
• SCADA and railway signalling security (ATC/CBTC)
• Penetration testing and vulnerability assessment
• Risk assessment and mitigation
• Disaster recovery planning and incident response
• FAT, SAT, SIT and integrated system testing