OT Systems & Cybersecurity Specialist in Marietta, Georgia at Cobb County-Marietta Water Authority

Job Summary

Under the direction of the Director of Technology, the OT Systems & Cybersecurity Specialist serves as a technical subject-matter resource responsible for the hands-on administration, security, reliability, resilience, and lifecycle management of Operational Technology (OT) computing systems supporting CCMWA’s critical water infrastructure. The position administers OT systems and cybersecurity technologies; supports the Authority’s OT cybersecurity program; and coordinates with Information Technology, Security, Operational Technology, SCADA, Engineering, Operations, vendors, and external partners to protect the confidentiality, integrity, availability, and recoverability of critical OT systems.

Essential Functions and Responsibilities

• Administers Windows servers, workstations, virtual machines, applications, and supporting infrastructure used by SCADA and other OT environments; installs, configures, patches, upgrades, and troubleshoots assigned systems.
• Supports SCADA-related application servers, historians, database servers, engineering workstations, HMIs, thin clients, and related computing platforms while maintaining appropriate separation from process-control and PLC programming responsibilities.
• Manages user and service accounts, permissions, authentication, group policies, privileged access, and other identity and access controls for assigned OT systems.
• Administers and maintains endpoint protection, EDR/anti-malware, application control, vulnerability management, logging, monitoring, and other cybersecurity technologies used within the OT environment.
• Monitors system performance, availability, hardware and application health, logs, and cybersecurity events; investigates suspicious activity and participates in incident response, containment, recovery, evidence preservation, post-event analysis, and corrective actions.
• Performs or coordinates vulnerability assessments, cybersecurity patching, system hardening, and risk-based remediation while accounting for operational availability, vendor requirements, and approved maintenance windows.
• Assists with the development, implementation, and maintenance of OT cybersecurity policies, standards, procedures, and secure configuration baselines in alignment with applicable regulatory requirements, industry frameworks, and guidance.
• Participates in internal and external cybersecurity audits, risk assessments, tabletop exercises, and remediation activities affecting OT systems.
• Maintains and validates OT hardware and software inventories, lifecycle records, system configurations, technical documentation, diagrams, recovery documentation, and secure configuration baselines to support cybersecurity, reliability, recovery, and lifecycle planning.
• Supports OT network segmentation, firewall controls, secure remote access, vendor access protections, and safeguards for IT/OT trust boundaries.
• Evaluates vendor remote access, cybersecurity practices, software updates, system integrations, and proposed architecture changes for potential cybersecurity and operational risks; coordinates technical support with vendors and system integrators.
• Provides OT cybersecurity guidance and assists with cybersecurity awareness and security best-practice training for Operations, Engineering, Maintenance, and Technology personnel.
• Monitors cybersecurity threats and threat intelligence relevant to water utilities, industrial control systems, and critical infrastructure and participates in threat-hunting activities within the OT environment.
• Coordinates with internal stakeholders, government agencies, cybersecurity partners, and vendors, as appropriate, during OT cybersecurity incidents and recovery activities.
• Supports the development, maintenance, and testing of OT disaster recovery, cyber recovery, business continuity, operational resilience plans, and recovery strategies for critical OT systems.
• Reviews proposed OT technologies, architectures, system modifications, and integrations for cybersecurity and operational impacts and participates in design reviews, factory acceptance testing (FAT), site acceptance testing (SAT), and commissioning activities as appropriate.
• Develops, tracks, and reports OT cybersecurity and system-health metrics, including vulnerability status, patch compliance, cybersecurity events, and other key performance indicators; supports continuous improvement of the Authority’s OT cybersecurity program.
• Coordinates with Operations, Security, and Technology personnel to support physical security technologies and the integration of physical and cybersecurity controls protecting OT assets and facilities; maintains awareness of emerging technologies, threats, vulnerabilities, and industry practices; may require after-hours/on-call work and performs other related duties as assigned.

Minimum Qualifications (Education, Experience, Skills and Abilities)

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, Engineering Technology, or a related field and at least three years of progressively responsible experience in systems administration, cybersecurity, network administration, OT/SCADA technology, or a related field; or an equivalent combination of education, training, certifications, and experience which provides the requisite knowledge, skills, and abilities for this position.
• Requires a Georgia Driver’s License with a good driving record and must maintain a good driving record to continue employment with the Authority.
• Experience administering Windows Server and Windows workstation operating systems, Active Directory, Group Policy, DNS, and related Microsoft technologies.
• Experience with virtualization technologies, server/workstation hardware, backup and recovery, and troubleshooting hardware/software problems.
• Knowledge of network fundamentals including TCP/IP, LAN/WAN communications, VLANs, routing, switching, and firewalls.
• Experience with endpoint protection/EDR, vulnerability management, security monitoring, system hardening, identity/access management, and incident response.
• Knowledge of SCADA or Industrial Control System architecture, HMIs, historians, application servers, engineering workstations, and OT network segmentation is preferred.
• Experience supporting water/wastewater utilities, critical infrastructure, industrial control systems, manufacturing, energy, or a similar operational environment is preferred.
• CompTIA Security+, CySA+, Network+, Microsoft, Cisco CCNA, GICSP, ISA/IEC 62443, or comparable technical/security certification preferred.2

Work Environment

• Work is performed in office and technology environments and may also require work in treatment plants, pumping facilities, control rooms, equipment rooms, server rooms, and other operational facilities.
• While performing this job, the employee may work near moving mechanical parts and may occasionally work in a noisy environment.
• Because OT systems support critical water infrastructure, the employee may occasionally work outside normal business hours for maintenance, upgrades, emergency troubleshooting, cybersecurity incidents, or system recovery.

Physical Demands

• The employee is frequently required to stand, walk, sit, use hands to handle or feel objects, tools, or controls; reach with hands and arms; climb or balance; stoop, kneel, crouch or crawl; talk, hear, and see.
• The employee may lift up to 50 pounds occasionally, up to 20 pounds frequently, and up to 10 pounds constantly to move objects.
• Tasks may involve extended periods of time at a keyboard or workstation.

Management retains the discretion to add or change the duties of the position at any time.