DotWave Solutions has an opening for a part-time contract Rail Systems / SCADA Cybersecurity Engineer supporting cybersecurity assessments in a light rail and transit setting. The work focuses on OT, ICS, and SCADA environments with an emphasis on non-disruptive, safety-critical review activities and close coordination with multiple stakeholders.
This hybrid/on-site role is based in the St. Louis area, with primarily remote execution and scheduled travel for authorized onsite work such as walkthroughs, field assessments, and technical reviews.
Role Summary
Serve as a technical contributor to cybersecurity assessment efforts across rail OT/ICS/SCADA systems. Responsibilities include evaluating architecture, validating asset inventories, reviewing security-relevant controls and system interfaces, and producing findings and recommendations that account for operational impact, availability, and reliability.
Responsibilities
- Support cybersecurity assessments of rail OT, ICS, and SCADA systems using non-disruptive methodologies.
- Assess critical rail systems, including Operations Control Centers (OCCs), traction power, substations, wayside train control, signals, switches, and crossings.
- Review and validate OT/SCADA asset inventories, including field devices, network equipment, communications infrastructure, and system interfaces.
- Evaluate OT network architecture, including segmentation, industrial communications, system dependencies, and IT/OT interfaces.
- Assess cybersecurity controls spanning access management, remote connectivity, configurations, monitoring, logging, patching, and firmware management.
- Review interfaces with supporting systems, including PA/CIS, CCTV, physical access control, vendor remote access, and enterprise IT.
- Assist with threat modeling, cybersecurity risk assessments, and safety-impact analysis, factoring system criticality and potential operational impact.
- Develop technical findings, remediation recommendations, network and segmentation documentation, risk assessments, and project reporting.
- Coordinate with cybersecurity, engineering, operations, safety, and maintenance stakeholders while ensuring activities comply with approved Rules of Engagement and do not disrupt live or safety-critical systems.
Requirements
- Professional experience with rail, transit, SCADA, OT/ICS, or comparable critical infrastructure systems.
- Strong knowledge of SCADA architecture, industrial networks, field devices, communications systems, and OT network segmentation.
- Experience performing cybersecurity assessments and applying non-disruptive methodologies in live OT/SCADA environments.
- Ability to interpret network diagrams, system architectures, asset inventories, and technical configurations.
- Strong analytical, technical documentation, communication, and collaboration skills.
- St. Louis-area or Missouri-based candidates strongly preferred, with availability for scheduled onsite activities in the St. Louis metro area.
Contract Details
- Job type: Part-Time, Contract
- Project duration: 3-6 months
- Expected timeframe: October 2026 – March 2027 (TBD), part-time project based
- Schedule: Variable based on project requirements
- Location: St. Louis, Missouri (Hybrid/Onsite as required)
- On-site requirement: Primarily remote with scheduled onsite activities as required
- Work location: Hybrid remote in St. Louis, MO 63102
Location and Travel Availability
Preference will be given to candidates located in or near the St. Louis Metropolitan area who can travel reasonably for stakeholder meetings, field assessments, system walkthroughs, technical reviews, and other authorized onsite activities. Candidates elsewhere in Missouri may also be considered if they can travel to the St. Louis area as project needs dictate.
Preferred Qualifications
- Direct experience with rail, light rail, passenger transit, or similar transportation systems.
- Experience with SCADA, Operations Control Centers (OCCs), traction power, rail signaling, wayside systems, or industrial communications networks.
- Experience conducting cybersecurity assessments in live OT/ICS or safety-critical environments.
- Familiarity with NIST CSF, NIST SP 800-82, ISA/IEC 62443, TSA, FTA, or State Safety Oversight requirements.
- Relevant certifications in cybersecurity, OT/ICS, networking, engineering, SCADA, or rail systems.
EEO Employer: DotWave Solutions is an Equal Employment Opportunity / Affirmative Action employer.
