Control Systems Engineer III - IV (Cybersecurity and Infrastructure Focus)

Closing Date to Apply: Open Until Filled 

Number of Positions: 1

Salary:

Engineer III:  $91,811.20 -$147,804.80

Engineer IV: $103,168.00- $180,523.20

Typically, selected candidates are hired at a salary rate between the minimum and midpoint of the range.

Benefits: This link below will provide you with Grant PUD’s benefit that may be available if hired, different employee types are eligible for different benefits.

Grant PUD — Unified Insurance Program (uip-wa.org)

Grant County PUD will administer a background check and reference check as part of the hiring process, if selected for this position. 

Position Summary

Be part of the Control Systems Engineering team responsible for designing, implementing, maintaining, and securing the infrastructure and tools that support Grant County PUD’s operation of the Bulk Electric System (BES).  This role will primarily focus on securing and managing the firewalls, switches, servers, storage arrays, and workstations.   The control systems department is also responsible for supervisory control and data acquisition (SCADA), energy management (EMS), Energy Accounting Systems (EAS), custom application & interface software, and databases.

Essential Functions

Essential functions, as defined under the Americans with Disabilities Act, may include any of the following representative duties, knowledge, and skills. This is not a comprehensive listing of all functions and duties performed by incumbents of this class; employees may be assigned duties which are not listed below; reasonable accommodations will be made as required. The job description does not constitute an employment agreement and is subject to change at any time by the employer. Essential duties and responsibilities may include, but are not limited to, the following:

General (applies to all levels)

• Demonstrated commitment to Grant PUD’s mission, vision, values, strategic plan, and Grant PUD / IBEW Local 77 Code of Excellence. The incumbent should be familiar with these organizational priorities and behave in a way that aligns with these expectations.
• Understand and adhere to compliance requirements for this position that may include laws, regulations, security guidelines, Grant PUD policies & Procedures.
• In this position, if needed to operate a GPUD vehicle for business purposes, please refer to the Vehicle/Asset Usage Policy, IS-TA-POL-001.
• Actively participate in all aspects of our safety program, including but not limited to:
  • Following all safety policies and procedures.
  • Alerting supervisors and coworkers to unsafe or hazardous working conditions.
  • Reporting any safety incidents or close calls within 24 hours to your supervisor.
  • Accepting feedback from supervisors and coworkers regarding your own safety performance.
• Support onboarding, mentoring, and training for less experienced team members
• Perform related duties as required or assigned.

Engineer III:

• Interact with, configure and maintain firewalls, virtual machine platforms, network switches, protocol converters, servers, workstations, and storage.
• Maintain infrastructure and security software including IDS, Active Directory, DNS, anti-virus, malware detection, vulnerability scanners, baseline management, backup and recovery, remote access, and multi-factor authentication.
• Implement and maintain Grant PUD’s monitoring, alerting, and reporting tools.
• Maintain and operate cyber systems to identify, detect, protect, respond, and recover from cyber threats and incidents.
• Support and ensure technologies and procedures comply with all Grant PUD's internal computing control requirements, cyber related legislations, industry regulation and guidance (NERC CIP, FERC) and all other Federal, State, and Local regulations.
• Develop, implement, maintain, automated cyber security controls. Implement ideas to improve processes based on lessons learned over time in performing assigned duties.
• Develop and employ scripts, cookbooks, checklists, and other tools/methods to automate tasks and enable efficient and repeatable outcomes of operational security controls.
• Become familiar with the applications supported by GMS, EMS and EAS team members.
• Work with other team members to diagnose and resolve communications and data issues related to application communication, telemetry and infrastructure. This includes capturing and/or analyzing network traffic with Wireshark and other similar tools.
• Collect, store, and report on data required to prove Grant PUD is meeting relevant regulatory requirements; complete Critical Infrastructure Protection (CIP) and other compliance reporting requirements including documenting system failovers, generating change control documentation, assisting with patch management, upgrading system firmware, and testing configuration changes for security risks; run SQL queries providing evidence of compliance.
• Create and maintain comprehensive documentation, including troubleshooting guides, standard operating procedures, and best practices.
• Support procurement and contract management processes to obtain hardware, software, and contract labor support. Facilitate vendor support by onboarding contractors with our processes and addressing needs to keep work flowing.

Engineer IV:

• Oversee, direct, maintain and configure firewalls, virtual machine platforms, network switches, protocol converters, servers, workstations, and storage.
• Analyze, design, and maintain infrastructure and security software including IDS, Active Directory, DNS, anti-virus, malware detection, vulnerability scanners, baseline management, backup and recovery, remote access, and multi-factor authentication.
• Architect and maintain Grant PUD’s monitoring, alerting, and reporting tools.
• Maintain and operate cyber systems to identify, detect, protect, respond, and recover from cyber threats and incidents.
• Ensure technologies and procedures comply with all Grant PUD's internal computing control requirements, cyber related legislation, industry regulation and guidance (NERC CIP, FERC) and all other Federal, State, and Local regulations.
• Develop, implement, and maintain automated cyber security controls. Implement ideas to improve processes based on lessons learned over time in performing assigned duties.
• Develop and employ scripts, cookbooks, checklists, and other tools/methods to automate tasks and enable efficient and repeatable outcomes of operational security controls.
• Cross-train with either GMS, EMS or EAS team members.
• Oversee diagnosing and resolving communications and data issues related to application communication, telemetry and infrastructure. This includes capturing and/or analyzing network traffic with Wireshark and other similar tools.
• Collect, store, and report on data required to prove Grant PUD is meeting relevant regulatory requirements; complete Critical Infrastructure Protection (CIP) and other compliance reporting requirements including documenting system failovers, generating change control documentation, assisting with patch management, upgrading system firmware, and testing configuration changes for security risks; run SQL queries providing evidence of compliance.
• Create and maintain comprehensive documentation, including troubleshooting guides, standard operating procedures, and best practices.
• Support procurement and contract management processes to obtain hardware, software, and contract labor support. Facilitate vendor support by onboarding contractors with our processes and addressing needs to keep work flowing.

Engineer V:

• Lead and direct capital improvement projects- Provide strategic leadership in planning, executing and overseeing all Capital Improvement Projects related to the Energy Management System (EMS)/Generation Management System (GMS) infrastructure and cyber security systems. Ensure project aligns with organizational goals, regulatory requirements and industry best practices.
• Oversee and Optimize EMS Control Systems-Direct the development, implementation, maintenance, and configuration of the hardware infrastructure and cyber security systems for NERC regulated utility control systems. Ensure system functionality, regulatory compliance accuracy, and efficiencies are continually improved through process feedback and analysis.
• Provide expert review and configuration of EMS data center infrastructure, GMS infrastructure, and substation engineering interfaces. - Evaluate and provide high-level technical guidance on engineering documentation, ensuring system changes and configurations align with established standards, operational needs and regulatory compliance.
• Mentor and provide technical leadership-Serve as subject matter expert, guiding and mentoring engineering teams on complex and high-impact assignments. Review work for accuracy, provide constructive feedback, and set technical direction for project success.
• Develop Systems for regulatory compliance and critical infrastructure protection (CIP) -Design and oversee systems for collecting, storing, and reporting compliance-related data. Ensure the organization meets all relevant regulatory and cyber security requirements, including critical infrastructure protection (CIP) and other compliance mandates.
• Serve as technical advisor across departments-Act as key technical consultant, collaborating with cross-function teams across the utility to provide expertise on EMS, substation engineering, compliance and system optimization initiative.

Required Qualifications: (Education and Experience, License, and/or Certification)

Engineer III:

• Bachelor’s degree in engineering, Technology or 2 additional years of relevant experience in lieu of degree
• Three (3) to Six (6) years of experience in maintaining infrastructure (hardware and management applications) providing 24x7 support of critical operations.

Engineer IV:

• Bachelor’s degree in engineering, Technology or 2 additional years of relevant experience in lieu of degree.
• Six (6) or more years of experience in maintaining infrastructure (hardware) providing 24x7 support of critical operations, with at least three of those years supporting medium or high North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) regulations.

Engineer V:

• Bachelor’s degree in engineering, Technology or 2 additional years of relevant experience in lieu of degree.
• Ten (10) or more years of experience in maintaining infrastructure (hardware) providing 24x7 support of critical operations, with at least seven of those years supporting medium or high North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP)regulations.

Preferred Qualifications: (Education and Experience, License, and/or Certification)

Engineer III:

• A Washington State Engineering in Training
• Utility experience.
• Knowledge of North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP)regulations

Engineer IV:

• Professional Engineer (PE).

Engineer V:

• Supervisory or team lead experience
• Professional Engineer (PE).

Other Knowledge, Skills, and Abilities

• Knowledge of NERC standards and regulations
• Knowledge of concepts, principles, theories, and methods surrounding electrical engineering industry standards and best practices
• Knowledge of data processing sufficient to be able to review program specifications, design programs and write or modify software code
• Knowledge of common application development patterns, including, but not limited to, Software Engineering best practices for all applicable technology, client-server architecture, service applications, object-oriented, and object-based software design
• Skill in problem-solving and thinking critically
• Independently adapting, interpreting, and applying written guidelines, precedents, and standardized work practices to a variety of unprecedented and problematic situations
• Written and oral interpersonal communication; workflow and time management
• Utilizing MS office products; specialized software, tools, and applications

Physical Requirements

• Position may be eligible for partial hybrid work arrangement: ☒Yes ☐No
• Majority of work is performed in a standard office
• Some field work that may require operation of a
• Typical shift of employees in this position: ☒8 hours ☒9 hours  ☒10 hours  ☐12 hours

*applicant/incumbent should refer to the Physical Capacity Evaluation (PCE)

The statements contained herein reflect general details as necessary to describe the principal functions for this job, the level of knowledge and skill typically required, and the scope of responsibility, but should not be considered an all-inclusive listing of work requirements.  Individuals may perform other duties as assigned, including work in other functional areas.

Established by local residents over 75 years ago, Grant PUD generates and delivers energy to millions of customers throughout the Pacific Northwest. What began as a grassroots movement of public power has evolved into one of the premiere providers of renewable energy at some of the most affordable rates in the nation. For additional information about Grant PUD or to learn about career opportunities visit our website at grantpud.org or follow us on facebook at GrantPUD.