If you are committed to public service, enjoy collaborating with others, share our values and have a desire to learn and grow, join The City of Calgary. City employees deliver the services, run the programs and operate the facilities which make a difference in our community. We support work-life balance, promote physical and psychological safety, and offer competitive wages, pensions, and benefits. Together we make Calgary a great place to make a living, a great place to make a life.
The City is committed to fostering a respectful, inclusive and equitable workplace which is representative of the community we serve. We welcome those who have demonstrated a commitment to upholding the values of equity, diversity, inclusion, anti-racism and reconciliation. Applications are encouraged from members of groups that are historically disadvantaged and underrepresented. Accommodations are available during the hiring process, upon request.
Water Treatment Control Systems Services (CSS) team currently supports risk mitigation coordination activities for the Water Treatment division. We implement organizational controls and safeguards to ensure safe, sustainable, and reliable operational technology (OT) to the Water Services utility, the City of Calgary, and the citizens that we serve. In this position, you will be responsible for the cybersecurity implementation and maintenance related to critical Industrial Control Systems (ICS) as well as day-to-day tasks to maintain system integrity and availability. Primary duties include:
- Implement, maintain, and support OT infrastructure cybersecurity to ensure alignment with corporate and ICS standards.
- Install, configure, and maintain high-availability of OT networks and equipment, including but not limited to: security appliances, routers, switches, wireless access points, and communications devices.
- Install, configure and maintain hardware and software as it relates to ICS cybersecurity, including but not limited to: antivirus, SIEM, backup & recovery, and patch management systems. Ensure continuing operation of aforementioned systems: Conduct regular scans, updates, backups and verifications to control systems.
- Work with CSS SME to implement cybersecurity measures to resolve vulnerabilities, mitigate risks, and recommend security changes to systems and/or components to maintain security objectives.
- Monitor OT system and network integrity to ensure availability, security and performance. Respond to alerts and notifications from monitoring systems and diagnose issues. Perform timely response and technical support to all incidents, requests, outages, and alerts. Conduct follow up on workflow and corrective actions. Analyze incident data for emerging trends.
- Develop and maintain plans, processes, and procedures for supporting OT infrastructure cybersecurity. Ensure systems operations and maintenance activities are properly documented and updated.
- Assist CSS technical staff in problem solving, troubleshooting, and application of industrial control systems.
- Perform asset management/inventory of OT resources
- Manage and deliver risk mitigation organizational controls and safeguard strategies set by corporate security to ensure the integrity of the water utility
- Support Water Treatment division’s ability to meet Corporate ICS Security Standard, Policy, and Corporate ICS Governance Committee Terms of Reference.
- Collaborate with Corporate Security regarding business risk assessments and on-demand risk assessments.
- Develop, review, and evaluate documentation in alignment with Corporate Security standards and policies.
- Develop and manage incident response plans with input from stakeholders. Organize and conduct dry runs and provide annual updates.
- Develop and manage ICS disaster recovery plans with input from stakeholders. Organize and conduct dry runs and provide annual updates.
- Perform ongoing risk analysis and identify gaps. Recommend actions to reduce risks to an acceptable level for water utility control systems with division Managers and Water Service teams.
- Project management of control systems cybersecurity related projects.
- Manage control systems cybersecurity action plans and schedules. Conduct regular reviews with stakeholders.
- Perform regular cybersecurity staff meetings, provide management reports and KPIs.
Qualifications
- A degree in Computer Engineering, Computer Science with at least 10 years of cybersecurity work experience; OR
- A diploma in Network Engineering Technology with GICSP and/or related security certification and at least 10 years of cybersecurity work experience.
- Security certification in GICSP, CISSP, CompTIA Security+ or GSEC is considered a strong asset.
- Previous experience in networking concepts and implementation, including firewalls, routing, and switching is preferred.
- Strong knowledge and experience in Water and Wastewater treatment processes would be considered an asset.
- Extensive understanding of OT concepts and systems, including DCS, SCADA, PLC/RTU, and communication protocols is also preferred.
- Demonstrated strong abilities in critical thinking; collaboration and relationship-building; customer focus; communication.
Pre-employment Requirements
- A security clearance will be conducted.
- Applicants will be tested for appropriate skills.
- Successful applicants must provide proof of qualifications.
Union: CUPE Local 38
Business Unit: Water Services
Position Type: 1 Permanent
Location: 1668 56 Avenue S.W.
Compensation: Pay Grade 12 $43.33 - 57.93 per hour (2022 Rates)
Days of Work: This position works a 5 day
work week with one day off in a 2 week cycle.
Hours of work: Non -standard 40 hour work week
Audience: Internal/External
Apply By: September 1, 2022
Job ID #:306120