OT Cyber Security Team Leader

Hazen and Sawyer is seeking an Operational Technology (OT) Cybersecurity Team Leader. As the OT Cybersecurity Team Leader, you will be responsible for leading the development, implementation, and oversight of cybersecurity initiatives within Hazen and Sawyer’s nationwide OT / Instrumentation and Controls (I&C) group.

Why Hazen and Sawyer:

- Founded in 1951 by the son of Allen Hazen (developer of the Hazen-Williams equation), we are an employee-owned company with a singular focus on "all things water."

- Our work includes planning, design, and oversight of construction of environmental infrastructure – for water, wastewater, and stormwater management.

- We foster a work environment low on bureaucracy and high in creativity.

- We recruit talented professionals, provide them with challenging, interesting, and creative assignments, and furnish them with the tools they need to succeed.

- We currently have over 2,400 employees in 70+ offices throughout the United States, Latin America, Canada, and the UK.

- A flexible hybrid work schedule supports today's busy professionals.

Key Responsibilities:

In this role, you will:

- Provide vision and direction for OT cybersecurity services across the firm’s water, wastewater, and environmental projects.

- Develop cybersecurity strategies and roadmaps tailored to utility and critical infrastructure clients.

- Guide clients in aligning with industry standards, such as NIST CSF, NERC CIP, AWWA G430, and ISA/IEC 62443.

- Lead multidisciplinary project teams delivering OT cybersecurity assessments, designs, and implementations.

- Serve as the primary client contact for OT cybersecurity initiatives, ensuring clear communication, value delivery, and long-term relationship building with clients

- Support utilities and agencies in achieving regulatory compliance and cyber resilience.

- Deliver presentations, training sessions, and workshops for clients and industry forums.

- Lead development of security policies, procedures, and playbooks specific to OT environments.

- Provide technical mentoring to team members and I&C engineers in both cybersecurity and control system architecture design.

- Collaborate with Hazen and Sawyer’s IT, OT, Digital Services, and engineering teams to embed cybersecurity best practices throughout project lifecycles.

- Support business development by identifying new opportunities, writing proposals, and presenting solutions to clients.

- Contribute to thought leadership through publications, presentations, and participation in industry organizations.

Work Setting:

- Hybrid Preferred (3 days in office; 2 days remote)

- Fully remote will be considered

Required Qualifications:

- Certified Information Systems Security Professional (CISSP) required

- Minimum of 15 years of experience in the IT / Cybersecurity industry required; minimum 5 years in water OT related infrastructure design projects desirable

- Bachelor's degree in computer science or equivalent from an accredited institution required

- Master of Science in Computer Science, Information Technology, Cybersecurity or equivalent from an accredited institution preferred

- Strong oral and written communication skills

- Excellent problem-solving skills to determine the most effective way to correct issues that arise

Preferred Qualifications:

- Experienced in the design of computer-based operational technology (OT) SCADA Systems specifically for water treatment plants, wastewater treatment plants and conveyance systems or equivalent in process control applications such as chemical processing, pulp/paper, oil/gas, power and electricity.

- Experienced in the maintenance of OT System security for large local government and municipal agencies or related industry

- Solid understanding of networking and system administration

- Experience with cloud computing architectures including Microsoft Azure, Google Cloud and Amazon Web Services

- Understanding of cryptography, reverse engineering, web applications, databases, and wireless technologies

- Understanding of scripting and programming associated with the following software and standards is preferred. Programming languages (such as SQL, C ++, JavaScript, Ruby, and Python)

- Security assessment tools (such as Aircrack-ng, Burp Suite, SQLmap, Nessus)

- Security frameworks (such as NIST, SOX, HIPAA, ISO)o

- Operating systems (such as Linux, Unix, Windows)

What We Offer:

- Comprehensive health benefits (medical, dental, vision, and prescription plans)

- Pre-tax flexible spending plans for medical, dependent care, and transportation

- Short and long-term disability, and employer paid life insurance

- Paid holidays, floating holidays, and paid time off (PTO)

- Employer-contributed 401(k) plan and additional financial planning support

- Professional growth opportunities, including tuition reimbursement, in-house training, and incentives for professional registration and professional organization memberships

- Starting pay range for this position depends on skills, experience, education and geographical location