PCS7 Engineer with Cyber Security Experience

Competency / Experience Requirement:

Expert knowledge with good hands-on experience:

• PCS7 V9.0 and above (Libraries like APL, PC, IL)
• TIA Portal V16 and above
• WinCC (should be capable of customizing objects as per requirements)
• Simatic Batch
• Profibus, Profinet, Modbus (RTU & TCP/IP), OPC, HART, PRP, HSR, IEC 61850 Protocols
• PLC’s – S7-400, S7-300, S7-1200, S7-1500, etc.
• Server Client Architecture
• OPC Servers

1. Knowledge of cybersecurity in IT/OT environments (Whitelisting, System Hardening, Domain setup, Patch management, Antivirus configuration)
2. Working knowledge of Siemens Process Historian and Information Server
3. Working Knowledge of Process industry in Key verticals such as Water and Wastewater, Power Management Systems, PLC based substation control systems, Metals & Mining, etc.
4. Able to handle tasks without supervision.
5. Very good troubleshooting experience
6. Experience in scripting.
7. Excellent communication skills
8. Good Experience in handling customer and customer requirements
9. Good Experience in design, engineering, internal testing, FAT, testing, commissioning and SAT.
10. Proven experience in documentation (FDS, Cabinet Drawings, Testing procedures, Heat Load Calculations, O&M manuals, etc.)
11. Capable of handling trainings to customers.
12. Able to manage a team of junior engineers.
13. Capable of providing solutions to tricky problems.
14. Engineer, implement, and monitor security measures for the protection of ICS systems or SIS systems, related networks, and information, while identifying and defining system security requirements.
15. Design ICS systems security architecture and develop detailed cybersecurity designs adhering to standard blueprints and best design practices.
16. Engage in the entire software/system lifecycle, encompassing design, documentation, installation, configuration, and testing.
17. Manage System Backup technologies like Acronis & other providers, including installation and deployment.
18. Deploy and Manage End Point Security & Application Control Solutions from McAfee & other providers, as well as SIEM solutions like McAfee, Splunk, Q-radar, & other providers.
19. Implement and manage network-based firewalls (e.g., Fortinet, Palo Alto, CISCO, SonicWALL, Siemens, etc.), network troubleshooting, and intrusion detection products.
20. Install and manage Network Management Solutions.
21. Conduct firmware updates for various Automation Control Systems, Switches, Firewalls, etc.
22. Configure and deploy Domain Controller settings and policies to defined computer groups.
23. Implement host-based security technologies such as Antivirus, Data Leakage Prevention, Host IPS, Whitelisting, and Anomaly Detection.
24. Perform installation, configuration, and testing activities at both factory (manufacturing facility) and customer sites, with experience in Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT).
25. Prepare comprehensive system documentation including Functional Design Specifications, Backup Systems documentation, Firewall configurations, Network Diagrams, System Architectures, Asset Inventory, FAT and SAT procedures, and Operation & Maintenance manuals.
26. Cyber Security FDS, FAT & SAT Document preparation