Associate Ics Cyber Security Engineer Jobs in Portland, ME

Requisition ID:  93831 

NextEra Energy Resources is one of America's largest wholesale electricity generators, harnessing diverse energy sources to power progress. We deliver tailored energy solutions that fuel economic growth, strengthen communities, and help customers achieve their energy goals. Ready to make a lasting impact? Take the next step in your career with us!

Position Specific Description

Nextera Energy Resources, LLC (NEER) is seeking an experienced individual to be part of the Power Generation Divisions - NERC CIP Compliance Program. This position will be located at NEER's Wyman plant, in Yarmouth, Maine, and report to the Power Generation Division -  Network Security Team Manager. The PGD Senior Technical Services Specialist role supports the cyber and physical security of the plants Industrial Control System (ICS) NERC Critical Infrastructure Protection (CIP) requirements. Candidates in this role will support NERC CIP process management, execution, implementation of security controls at power plants, and participation in ICS automation projects, as required.

Team members in this role will:

• Responsible for the execution and maintenance of plant cyber & physical security controls to meet corporate and NERC CIP standards
• Perform duties related to change management, patch management, antivirus, log monitoring, system administration, backup and recovery and restoration 
• Executes weekly, monthly, quarterly & annual reviews & documentation based on corporate compliance and/or NERC CIP regulations
• Works closely with subject matter experts and vendors to complete project goals including audits, vulnerability assessments, mitigation plans & other various activates as needed.
• Support cyber security improvement and life cycle projects

Additional Responsibilities:
This job applies diverse knowledge of technical principles and practices to a broad variety of assignments and related fields. Individuals in the job use advanced techniques and modification and extension of theories, precepts, and practices in individual's field. Employees in this role devise new solutions to problems encountered. Individuals will receive guidance related largely to overall objectives, critical issues, new concepts, and policy matters and may receive technical guidance for unusual or complex problems.

• Provides full-time NERC CIP cyber and physical technical support to plant operations
• Maintains cyber & physical access to meet corporate standards and/or NERC CIP standards.
• Executes weekly, monthly, quarterly & annual reviews & documentation based on corporate compliance standards and/or NERC CIP Regulations.
• Works closely with SME (Subject Matter Experts) and vendors to complete project goals including audits, vulnerability assessments, mitigations & other various activates as needed.
• Support and understand cyber security improvement and Life cycle projects.
• Working knowledge and understanding of NERC CIP regulatory standards and processes.
• Document and track all system changes with a heavy focus on NERC CIP 002, 004, 006, 007, 009, 010, 012, and 013.
• Preparation of documentation in support of audits and maintaining compliance of PGD Sites with Corporate and/or NERC CIP Regulations. 

Due to the 24 hour, 7 days per week nature of power generation, night, weekend, and holiday support via telephone or call-out, may be required. 

Desired Qualifications:

• Working knowledge and understanding of NERC CIP regulatory standards and processes 
• Understanding of security principles and good knowledge of cyber security technologies
• Understanding of network architecture and topologies
• Ability to perform monitoring and troubleshooting of cyber security problems.
• Fundamental knowledge of Firewall security
• Project Management experience
• Ability to troubleshoot Network Switches and Routers on a Plant Control or Process Data Networks
• Knowledge of the latest standard practices for communication protocols and browser technologies
• General knowledge of a typical Distributive Control System (DCS). 
• Knowledge of third-party datalink protocols (Modbus, DNP, ABPLC, etc.), that interface to DCS Control Systems
• System audit skills and/or information security experience (certifications) 
• Bachelor's - Engineering/Computer Science/Information Security
• Knowledge in Industrial Control Systems/Cyber Security/Network Infrastructure
• Certifications - Security+/ CCNA/ CISSP
• NERC Regulatory Standards/Information Technology Frameworks

NextEra Energy offers a wide range of benefits to support our employees and their eligible family members. Click here to learn more.

Employee Group:  Exempt
Employee Type:  Full Time
Job Category:  Technical Specialist
Organization:  NextEra Energy Maine Operating Services, LLC 
Relocation Provided:  Yes, if applicable

NextEra Energy is an Equal Opportunity Employer. Qualified applicants are considered for employment without regard to race, color, age, national origin, religion, marital status, sex, sexual orientation, gender identity, gender expression, genetics, disability, protected veteran status or any other basis prohibited by law. 

NextEra Energy provides reasonable accommodation in its application and selection process for qualified individuals, including accommodations related to compliance with conditional job offer requirements, consistent with federal, state, and local laws. Supporting medical or religious documentation will be required where applicable and permitted by applicable law. To request a reasonable accommodation, please send an e-mail to recruiting-coordinator.sharedmailbox@nexteraenergy.com, providing your name, telephone number and the best time for us to reach you. 

NextEra Energy will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.

NextEra Energy does not accept any unsolicited resumes or referrals from any third-party recruiting firms or agencies. Please see our policy for more information.

#LI-GM1