Rail Systems / SCADA Cybersecurity Engineer

DotWave Solutions is seeking a part-time Rail Systems / SCADA Cybersecurity Engineer to support cybersecurity assessments for OT, ICS, and SCADA environments in a light rail and transit context. This contract role focuses on non-disruptive, safety-critical assessment activities and coordination with multiple stakeholders across a hybrid/on-site schedule in the St. Louis area.

Responsibilities

• Support cybersecurity assessments of rail OT, ICS, and SCADA systems using non-disruptive methodologies.
• Assess critical rail infrastructure components, including Operations Control Centers (OCCs), traction power, substations, wayside train control, signals, switches, and crossings.
• Review and validate OT/SCADA asset inventories, including field devices, network equipment, communications infrastructure, and system interfaces.
• Evaluate OT network architecture and segmentation, industrial communications, system dependencies, and IT/OT interfaces.
• Assess cybersecurity controls covering access management, remote connectivity, configurations, monitoring, logging, patching, and firmware management.
• Review interfaces with supporting systems, including PA/CIS, CCTV, physical access control, vendor remote access, and enterprise IT.
• Support threat modeling, cybersecurity risk assessments, and safety-impact analysis with consideration for system criticality, operational impact, availability, and reliability.
• Develop technical findings, remediation recommendations, and documentation such as network and segmentation materials, risk assessments, and project reports.
• Coordinate with cybersecurity, engineering, operations, safety, and maintenance stakeholders, ensuring work complies with approved Rules of Engagement and does not disrupt live or safety-critical systems.

Requirements

• Professional experience with rail, transit, SCADA, OT/ICS, or comparable critical infrastructure systems.
• Strong knowledge of SCADA architecture, industrial networks, field devices, communications systems, and OT network segmentation.
• Experience performing cybersecurity assessments using non-disruptive methodologies in live OT/SCADA environments.
• Ability to interpret network diagrams, system architectures, asset inventories, and technical configurations.
• Strong analytical, technical documentation, communication, and collaboration skills.
• St. Louis-area or Missouri-based candidates are strongly preferred, with the ability to support scheduled onsite activities in the St. Louis metropolitan area.

Job Type and Duration

• Job Type: Part-Time, Contract
• Project Duration: 3-6 months
• Expected Timeframe: October 2026 to March 2027 (TBD), part-time and project based
• Schedule: Variable based on project requirements

Location and On-Site Availability

The role is hybrid with primarily remote work plus scheduled onsite activities as required. Preference is given to candidates located in or near the St. Louis Metropolitan area who can travel for stakeholder meetings, field assessments, system walkthroughs, technical reviews, and other authorized onsite activities. Candidates located elsewhere in Missouri may also be considered if they can travel to St. Louis as project requirements dictate.

Preferred Qualifications

• Direct experience with rail, light rail, passenger transit, or similar transportation systems.
• Experience with SCADA and rail-related environments such as Operations Control Centers (OCCs), traction power, rail signaling, wayside systems, or industrial communications networks.
• Experience conducting cybersecurity assessments in live OT/ICS or safety-critical environments.
• Familiarity with NIST CSF, NIST SP 800-82, ISA/IEC 62443, TSA, FTA, or State Safety Oversight requirements.
• Relevant certifications in cybersecurity, OT/ICS, networking, engineering, SCADA, or rail systems.

EEO Employer

DotWave Solutions is an Equal Employment Opportunity / Affirmative Action employer.

Work Location

Hybrid remote in St. Louis, MO 63102.