Sr Power Generation Technical Services Specialist - Critical Infrastructure Protection

NextEra Energy•Yarmouth, ME

1d•Onsite

About The Position

Nextera Energy Resources is one of America’s largest wholesale electricity generators, harnessing diverse energy sources to power progress. We deliver tailored energy solutions that fuel economic growth, strengthen communities, and help customers achieve their energy goals. Ready to make a lasting impact? Take the next step in your career with us! Nextera Energy Resources, LLC (NEER) is seeking an experienced individual to be part of the Power Generation Divisions - NERC CIP Compliance Program. This position will be located at NEER’s Wyman plant, in Yarmouth, Maine, and report to the Power Generation Division - Network Security Team Manager. The PGD Senior Technical Services Specialist role supports the cyber and physical security of the plants Industrial Control System (ICS) NERC Critical Infrastructure Protection (CIP) requirements. Candidates in this role will support NERC CIP process management, execution, implementation of security controls at power plants, and participation in ICS automation projects, as required. Team members in this role will: Responsible for the execution and maintenance of plant cyber & physical security controls to meet corporate and NERC CIP standards Perform duties related to change management, patch management, antivirus, log monitoring, system administration, backup and recovery and restoration Executes weekly, monthly, quarterly & annual reviews & documentation based on corporate compliance and/or NERC CIP regulations Works closely with subject matter experts and vendors to complete project goals including audits, vulnerability assessments, mitigation plans & other various activates as needed. Support cyber security improvement and life cycle projects Additional Responsibilities:This job applies diverse knowledge of technical principles and practices to a broad variety of assignments and related fields. Individuals in the job use advanced techniques and modification and extension of theories, precepts, and practices in individual's field. Employees in this role devise new solutions to problems encountered. Individuals will receive guidance related largely to overall objectives, critical issues, new concepts, and policy matters and may receive technical guidance for unusual or complex problems. Provides full-time NERC CIP cyber and physical technical support to plant operations Mains cyber & physical access to meet corporate standards and/or NERC CIP standards. Executes weekly, monthly, quarterly & annual reviews & documentation based on corporate compliance standards and/or NERC CIP Regulations. Works closely with SME (Subject Matter Experts) and vendors to complete project goals including audits, vulnerability assessments, mitigations & other various activates as needed. Support and understand cyber security improvement and Life cycle projects. Working knowledge and understanding of NERC CIP regulatory standards and processes. Document and track all system changes with a heavy focus on NERC CIP 002, 004, 006, 007, 009, 010, 012, and 013. Preparation of documentation in support of audits and maintaining compliance of PGD Sites with Corporate and/or NERC CIP Regulations. Due to the 24 hour, 7 days per week nature of power generation, night, weekend, and holiday support via telephone or call-out, may be required. Job OverviewThis job interprets, organizes, executes and coordinates assignments. Employees in the role plan and develop technical projects concerned with unique or controversial complexities which have important impact on major company programs. This involves exploration of subject area, definition of scope, selection of areas for investigation, and development of novel concepts. Individuals in the role act as a technical liaison to individuals within and outside their organization with responsibility to act independently regarding technical matters pertaining to the individual's field. Employee's assignments are given in broad terms concerning general objectives and limitations.

Requirements

Technical / Functional Excellence/Learning
Process Management Concepts
Quality Tools and Techniques
Effective Written Communications
Effective Verbal Communications
High School Grad / GED
Safety Policy and Practice
Bachelor's or Equivalent Experience
Experience: 4+ years

Nice To Haves

Working knowledge and understanding of NERC CIP regulatory standards and processes
Understanding of security principles and good knowledge of cyber security technologies
Understanding of network architecture and topologies
Ability to perform monitoring and troubleshooting of cyber security problems.
Fundamental knowledge of Firewall security
Project Management experience
Ability to troubleshoot Network Switches and Routers on a Plant Control or Process Data Networks
Knowledge of the latest standard practices for communication protocols and browser technologies
General knowledge of a typical Distributive Control System (DCS).
Knowledge of third-party datalink protocols (Modbus, DNP, ABPLC, etc.), that interface to DCS Control Systems
System audit skills and/or information security experience (certifications)
Bachelor’s – Engineering/Computer Science/Information Security
Knowledge in Industrial Control Systems/Cyber Security/Network Infrastructure
Certifications – Security+/ CCNA/ CISSP
NERC Regulatory Standards/Information Technology Frameworks
Bachelor's - Engineering
Supervisor/Management Experience:Without Rating

Responsibilities

Responsible for the execution and maintenance of plant cyber & physical security controls to meet corporate and NERC CIP standards
Perform duties related to change management, patch management, antivirus, log monitoring, system administration, backup and recovery and restoration
Executes weekly, monthly, quarterly & annual reviews & documentation based on corporate compliance and/or NERC CIP regulations
Works closely with subject matter experts and vendors to complete project goals including audits, vulnerability assessments, mitigation plans & other various activates as needed.
Support cyber security improvement and life cycle projects
Provides full-time NERC CIP cyber and physical technical support to plant operations
Maintains cyber & physical access to meet corporate standards and/or NERC CIP standards.
Executes weekly, monthly, quarterly & annual reviews & documentation based on corporate compliance standards and/or NERC CIP Regulations.
Works closely with SME (Subject Matter Experts) and vendors to complete project goals including audits, vulnerability assessments, mitigations & other various activates as needed.
Support and understand cyber security improvement and Life cycle projects.
Working knowledge and understanding of NERC CIP regulatory standards and processes.
Document and track all system changes with a heavy focus on NERC CIP 002, 004, 006, 007, 009, 010, 012, and 013.
Preparation of documentation in support of audits and maintaining compliance of PGD Sites with Corporate and/or NERC CIP Regulations.
Provides full-time technical support to the operations and business unit personnel
Performs system testing and documentation to critical systems during significant changes and/or upgrade
Analyzes and identifies the root cause of - and implements comprehensive technical solutions to - complex application deficiencies and system issues
Provides technical leadership in the functional specification, design and implementation of new (as well as enhancements to existing) security center applications and tools
Develops new (and improves existing) processes with goal of increasing productivity, reducing risk of system failure, promoting efficiency in work flow, and meeting or exceeding the key operational performance targets
Establishes, documents and maintains procedures and guidelines related to the day-to-day operational support provided to the operations and business unit personnel
Travels to power plants for onsite troubleshooting support
Performs other job-related duties as assigned