Intermediate ICS​/OT Cybersecurity Engineer

Intermediate ICS/OT Cybersecurity Engineer

Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career.

Sentar is seeking an Intermediate ICS/OT Cybersecurity Engineer that can sit REMOTELY! Frequent travel may be required.

Role

Description:

Sentar is seeking a motivated and detail-oriented Junior ICS/OT Cybersecurity Engineer to join our team. This role focuses on the post-construction security hardening of Facility Related Control Systems (FRCS), Industrial Control Systems (ICS), and Operational Technology (OT) environments, ensuring compliance with UFGS 25 05 11 standards. The successful candidate will work with fellow Sentar engineers and prime/sub contractor and the government to secure facility-related control systems, implement cybersecurity best practices, and support the Authorization to Operate (ATO) process for mission-critical infrastructure.

Key Responsibilities

• Assist in the post-construction cybersecurity hardening of ICС/OT systems, including PLCs, SCADA, Security Systems, Fire Alarms, Electrical Panels, HVAC, and other control system components.
• Implement security controls and configurations in accordance with UFGS 25 05 11 requirements, including hardening operating systems to configure system boundary protection, access control, and audit logging.
• Run Security Content Automation Protocol (SCAP) scans to assess system compliance and identify vulnerabilities in ICС/OT environments.
• Apply DISA Security Technical Implementation Guides (STIGs) to harden operating systems, applications, and network devices within control system architectures.
• Conduct vulnerability assessments and risk analyses on control systems using various automated and manual techniques to identify and mitigate potential security gaps.
• Collaborate with architecture and engineering teams to ensure cybersecurity measures are integrated into system designs both pre and post-construction.
• Support the development, documentation, and submission of System Security Plans (SSPs), Risk Management Framework (RMF) artifacts, and compliance reports aligned with UFGS standards to achieve and maintain Authorization to Operate (ATO).
• Utilize eMASS to input, track, and manage cybersecurity controls, vulnerabilities, and ATO packages under senior engineer guidance.
• Perform security testing (e.g., system scans, penetration testing, configuration reviews) to validate hardening measures and ensure ATO readiness.
• Stay up-to-date on emerging threats, vulnerabilities, and industry standards affecting ICС/OT environments.

Qualifications:

Clearance Level: Secret

Certifications
:

• CompTIA Security+ is required, active CISSP or willingness to obtain within the first year strongly preferred.

Education:

• Bachelor’s degree in Cybersecurity, Electrical Engineering, Computer Science, or a related field (or equivalent experience)

Experience:

• 3-5 years of experience in cybersecurity with direct exposure to FRCS/ICS/OT environments or control systems is preferred.
• Technical
  
  Skills:
  • Basic understanding of ICС/OT protocols (e.g., Modbus, DNP3, OPC).
  • Familiarity with cybersecurity frameworks such as NIST 800-53, NIST 800-82, UFGS 25 05 11, and IEC 62443.
  • Familiarity with eMASS for managing RMF workflows and generating/updating ATO documentation.
  • Experience with network security scanning tools (e.g., ACAS, Nessus) and system hardening techniques.
  • Knowledge of Windows and Linux operating systems in industrial environments.
  • CISCO command line interface
• Soft Skills:
  • Strong analytical and problem-solving abilities.
  • Excellent communication skills for documenting findings and collaborating with cross-functional teams.
  • Ability to work under varying degrees of supervision and learn quickly in a multi-project environment.

Specific Requirements

• Demonstrated ability or willingness to learn UFGS 25 05 11 compliance requirements, including:
  • Hardening control…