Cybersecurity Compliance Engineer – NERC CIP

Brief Description

The

Cybersecurity Compliance Engineer

is responsible for securing and maintaining the integrity of control and business networks at the Keystone and Conemaugh Generating Stations. This role ensures compliance with NERC CIP cybersecurity standards and supports the stations’ broader cybersecurity initiatives. The engineer will manage network infrastructure, monitor performance, and collaborate with internal and external stakeholders to maintain a secure and compliant operational environment. This role will require 10% travel or less for scheduled site-required visits.

Essential Duties And Responsibilities

- Administer and maintain firewalls, switches, routers, wireless access points, IP addressing, certificates, and protocols.

- Evaluate and implement firewall rules in coordination with Distributed Control System (DCS) Leads.

- Ensure secure business-to-control network connections in compliance with NERC CIP standards.

- Monitor network performance using tools such as SNMP and packet analyzers; proactively resolve issues.

- Maintain and monitor the ConsoleWorks application and associated hardware.

- Manage cyber asset inventories and execute change management for asset updates.

- Maintain server licensing and certificates for network and security servers.

- Execute daily, monthly, and annual NERC CIP program requirements under guidance from the CAMS NERC CIP Specialist.

- Champion cybersecurity and NERC CIP compliance programs at assigned facilities.

- Conduct or support cybersecurity and compliance training initiatives.

- Coordinate with DCS Leads and contractors to ensure timely software patching per CIP standards.

- Independently manage complex projects and maintain regulatory documentation and filing systems.

Requirements

- Bachelor’s degree in Information Technology or a related field, or equivalent experience.

- Minimum 5 years of hands-on networking experience, preferably in distributed control systems.

- Experience with NERC compliance or similar regulatory frameworks preferred.

- Ability to perform physical tasks including lifting (up to 25 lbs), climbing, bending, and working in industrial environments.

Preferred Skills And Certifications

- Industry certifications such as CCNP, CompTIA Network+.

- Experience with ConsoleWorks or similar remote access/network monitoring tools.

- Familiarity with power plant operations and compliance functions.

- Working knowledge of FERC, NERC, and Regional Reliability Entity standards and reporting requirements.

- Strong commitment to cybersecurity excellence and regulatory compliance.

- Excellent communication, planning, and organizational skills.

- Ability to manage multiple complex tasks and assess compliance risks in real-time.

Summary

Applicants must possess a

valid driver's license

and maintain a clean driving record, as this position requires occasional travel for company business. Candidates should be comfortable operating a vehicle as part of their job responsibilities and must meet any applicable company and insurance requirements.

We offer a variety of excellent benefits. Full-time employees are offered the following: medical, dental, vision, LTD, STD, and Life insurance plans. You can even select additional “al la carte” benefits to meet all your needs. You can also enroll in our 401k, flex spending accounts for medical and childcare needs, and participate in our employee referral and tuition reimbursement programs.

Qualified Applicants must be legally authorized for employment in the United States. Qualified Applicants will not require employer sponsored work authorization now or in the future for employment in the United States.

We believe in transparency and providing candidates with important information to make informed decisions. The salary range for this position is commensurate with experience, qualifications, and location. Actual compensation will be determined based on several factors, including but not limited to skills, experience, and relevant qualifications.

This range represents the base salary and does not include other forms of compensation, such as bonuses, benefits, or equity, which may be offered in addition to the base pay. The company reserves the right to modify compensation ranges at any time in accordance with business needs and market conditions.