Team Member - OT Security Grid Automation

1. Conduct risk assessments and vulnerability analyses for OT systems to identify potential security weaknesses, threats, and vulnerabilities. Develop strategies to mitigate and manage risks effectively.

2. Develop and implement Security Incident Response plans to address and mitigate security incidents and breaches in OT environments. Lead investigations, containment efforts, and recovery activities to minimize impact and restore system integrity.

3. Design and implement robust security architectures for OT systems, including network segmentation, access controls, and secure protocols. Ensure that security measures are integrated into the design of new systems and technologies.

4. Ensure compliance with relevant industry regulations, standards, and cybersecurity frameworks applicable to OT systems (e.g., NERC CIP, IEC 62443). Stay up to date with changes in regulations and help organizations meet compliance requirements.

5. Conduct security assessments and audits of OT systems to evaluate the effectiveness of security controls, identify gaps, and recommend improvements. Collaborate with internal and external stakeholders to address findings and implement necessary security enhancements.

6. Raise awareness among employees and stakeholders about OT cybersecurity risks, best practices, and policies. Develop and deliver training programs to educate personnel on secure operational practices and the importance of cybersecurity.

7. Define and implement secure configurations for OT devices, equipment, and systems. Apply industry best practices for system hardening, including disabling unnecessary services, implementing strong passwords, and enforcing access controls.

8. Stay informed about emerging threats and vulnerabilities specific to OT environments. Implement threat intelligence mechanisms and monitoring tools to detect and respond to security incidents in real-time.

9. Monitor and perform assigned daily work management tasks related to automation.

10. Ensure the targeted availability of the GSAS system through maintenance and by providing on-call support to PSC (Power System Control) and other stakeholders.

11. Monitor compliance with service level agreements (SLAs) for addressing operational variances recorded in ADMS.

12. Coordinate technical support for our internal customers, including STS, EHV Projects, and STS Protection, on a daily basis.

13. Monitor the availability of spare parts for GSAS equipment, ensuring a minimum bin level is maintained.

14. Monitor communication availability through INMS and various reports. Conduct root cause analysis and submit corrective and preventive actions (CAPAs) as needed.

15. Perform factory inspections as recommended by I&QA to maintain product quality and for EHV projects involving new grid installations.

16. Engage in organization-wide initiatives such as Cultural Clubs, Music Clubs, Ullas, employee engagement action plans, timely compliance, Youth Power Confluence (Trainees), Shine, Shabash, Prayaas, QC, and other relevant activities.

17. ADMS/SCADA system operation and monitoring to ensure reliable and efficient functioning of the power distribution network. Monitor real-time data, analyze system performance, and identify anomalies or issues.

18. ADMS/SCADA Configuration and Integration of various components of the ADMS/SCADA system, including databases, communication networks, RTUs and Other IT Interfaces. Ensure seamless integration and interoperability between different system elements.

19. ADMS/SCADA System Maintenance and Troubleshooting tasks and implement necessary repairs or optimizations. Conduct system inspections, diagnosis, and testing to ensure proper functioning.

20. ADMS/SCADA System Upgrades and Enhancements planning and implementation of system upgrades, expansions, and enhancements. Collaborate with cross-functional teams to assess system requirements, procure necessary equipment, and execute upgrade projects.

21. Provide training to system operators and other personnel on ADMS/SCADA system operations, procedures, and best practices. Maintain documentation including system configuration, procedures, and operational manuals.

Knowledge & Skills Required:

1. Preferred B. Tech degree in Electrical/Electronics/EEE with a minimum of 5 years of experience in Operations and Maintenance (O&M).

2. In-depth knowledge of Substation Automation concepts, including basic components like Control Centers, RTUs/IEDs, Network.

3. Exposure to OT devices, including basic knowledge of different RTUs, Firewalls, Ethernet Switches, IEDs/relays, and familiarity with various protocols used in Power Utilities.

4. Strong background in cybersecurity principles, methodologies, and technologies. They should possess specialized knowledge in securing operational technology (OT) systems, such as industrial control systems (ICS) and SCADA systems. Proficiency in risk assessment and vulnerability analysis, security incident response, and compliance with relevant regulations and standards is crucial. They should have expertise in network security, secure configuration, and hardening of OT devices. Additionally, knowledge of threat intelligence, monitoring, and incident detection is essential. Effective communication, collaboration, and problem-solving skills are also important for OT Cyber Security personnel to protect critical infrastructure and mitigate cybersecurity risks in OT environments.

5. Exposure to OT Cyber Security, including mitigating and implementing basic functionalities, installation of firewalls, FMS (Firewall Management System), centralized patch management, deployment of updates, and understanding of ISA99/IEC62443 standards.

6. Ability to conduct Factory Acceptance Tests (FAT) in accordance with IS/IEC standards, including detailed knowledge of equipment evaluation and inspection processes, test procedures, and interpretation of results based on GTP/Standards.

7. Knowledge of safety procedures, equipment, and effective safety management policies and procedures, including Safety Management Systems, CAPA management systems, reporting mechanisms, conducting tool and PPE audits, and understanding consequence safety management.

8. Strong data analysis skills, including identifying the root causes of operational variances, finding solutions to resolve them, and effectively closing notifications generated by internal stakeholders in SAP.

9. Relevant knowledge of SAP processes and modules, working with different modules (PS/PM/MM/ISU) relevant to the department, understanding the flow of information between different levels, suggesting improvements for optimization and cycle time reduction, and extracting data and generating reports using SAP.

10. In-depth knowledge of Ethernet-based communication structures, including communication methodologies, network topologies, and the ability to troubleshoot and provide solutions for communication systems.

11. Proficiency in handling operating systems (OS) such as Unix/Linux/MS Windows XP/7/8, with the ability to diagnose and troubleshoot different RTUs from Synergy/GE/SIEMENS/ABB/ALSTOM.

12. Experience in database administration, such as SQL Server 2008 R2, including creating databases, database backup and restore, creation of stored procedures, SQL Server Agent jobs, maintenance plans, and familiarity with Oracle DB administration and RDBMS products.

13. Strong understanding of ADMS/SCADA system operations, protocols, and architectures. They should possess knowledge of data acquisition and supervisory control, as well as the ability to configure and integrate various components of the system. Proficiency in troubleshooting and maintenance is crucial, along with familiarity with networking protocols, databases, and scripting languages. Additionally, expertise in SCADA/ADMS technology, monitoring real-time data, analyzing system performance, and ensuring compliance with industry standards are essential.

14. Preferably, exposure to the installation, integration, and configuration of ADMS (Advanced Distribution Management System) and knowledge of testing ADMS Web Services using SOAP UI Interface.

15. Proficiency in SCADA/ADMS Database engineering, including knowledge of SCADA/ADMS technology, working with control central software, data acquisition, supervisory control, creating bilateral tables, editing, LRU creation, and familiarity with third-party software tools such as Networking Protocol (IEC 104), UNIX, Shell Scripting, RDBMS, ICCP Protocol, Oracle 8i, SQL.