Sr Power Generation Technical Services Specialist - Critical Infrastructure Protection

Requisition ID: 93831 \n \nNextEra Energy Resources is one of America's largest wholesale electricity generators, harnessing diverse energy sources to power progress. We deliver tailored energy solutions that fuel economic growth, strengthen communities, and help customers achieve their energy goals. Ready to make a lasting impact? Take the next step in your career with us!\n \nPosition Specific Description\n \nNextera Energy Resources, LLC (NEER) is seeking an experienced individual to be part of the Power Generation Divisions - NERC CIP Compliance Program. This position will be located at NEER's Wyman plant, in Yarmouth, Maine, and report to the Power Generation Division - Network Security Team Manager. The PGD Senior Technical Services Specialist role supports the cyber and physical security of the plants Industrial Control System (ICS) NERC Critical Infrastructure Protection (CIP) requirements. Candidates in this role will support NERC CIP process management, execution, implementation of security controls at power plants, and participation in ICS automation projects, as required.\n \nTeam members in this role will:\n\n Responsible for the execution and maintenance of plant cyber & physical security controls to meet corporate and NERC CIP standards\n Perform duties related to change management, patch management, antivirus, log monitoring, system administration, backup and recovery and restoration \n Executes weekly, monthly, quarterly & annual reviews & documentation based on corporate compliance and/or NERC CIP regulations\n Works closely with subject matter experts and vendors to complete project goals including audits, vulnerability assessments, mitigation plans & other various activates as needed.\n Support cyber security improvement and life cycle projects\n \nAdditional Responsibilities:\n \nThis job applies diverse knowledge of technical principles and practices to a broad variety of assignments and related fields. Individuals in the job use advanced techniques and modification and extension of theories, precepts, and practices in individual's field. Employees in this role devise new solutions to problems encountered. Individuals will receive guidance related largely to overall objectives, critical issues, new concepts, and policy matters and may receive technical guidance for unusual or complex problems.\n\n Provides full-time NERC CIP cyber and physical technical support to plant operations\n Maintains cyber & physical access to meet corporate standards and/or NERC CIP standards.\n Executes weekly, monthly, quarterly & annual reviews & documentation based on corporate compliance standards and/or NERC CIP Regulations.\n Works closely with SME (Subject Matter Experts) and vendors to complete project goals including audits, vulnerability assessments, mitigations & other various activates as needed.\n Support and understand cyber security improvement and Life cycle projects.\n Working knowledge and understanding of NERC CIP regulatory standards and processes.\n Document and track all system changes with a heavy focus on NERC CIP 002, 004, 006, 007, 009, 010, 012, and 013.\n Preparation of documentation in support of audits and maintaining compliance of PGD Sites with Corporate and/or NERC CIP Regulations. \n \nDue to the 24 hour, 7 days per week nature of power generation, night, weekend, and holiday support via telephone or call-out, may be required. \n \nAdditional Qualifications:\n\n Working knowledge and understanding of NERC CIP regulatory standards and processes \n Understanding of security principles and good knowledge of cyber security technologies\n Understanding of network architecture and topologies\n Ability to perform monitoring and troubleshooting of cyber security problems.\n Fundamental knowledge of Firewall security\n Project Management experience\n Ability to troubleshoot Network Switches and Routers on a Plant Control or Process Data Networks\n Knowledge of the latest standard practices for communication protocols and browser technologies\n General knowledge of a typical Distributive Control System (DCS). \n Knowledge of third-party datalink protocols (Modbus, DNP, ABPLC, etc.), that interface to DCS Control Systems\n System audit skills and/or information security experience (certifications) \n Bachelor's \u2013 Engineering/Computer Science/Information Security\n Knowledge in Industrial Control Systems/Cyber Security/Network Infrastructure\n Certifications \u2013 Security+/ CCNA/ CISSP\n NERC Regulatory Standards/Information Technology Frameworks\n \nJob Overview\n\n