Control Systems IT Engineer

Position Description:

Has to be based in Calgary or Kitimat (If based in Calgary will need to travel to Kitimat at least 3 weeks per month)

As Control Systems Information Technology (CS IT) engineering consultant, you are a deep technical expert in the support, design, configuration, and change of Control Systems and their integration into the overall local network the Process Control Domain (PCD).

This role is particularly focused on the design, configuration, and maintenance of network security controls that safeguard the process control layer from outsider access. The role also supports local PCD project activities with operational support activities based on demand.

You are part of a team that provides support security of endpoints and network communication that directly or indirectly support safe and reliable oil and gas production by facilities as part of the Integrated Gas business. Your success depends to a large degree on the relationships with stakeholders who are accountable and responsible for the work process to Manage PCD Integrity, on a good understanding of drivers for risk, appetite of the business, and on a high level understanding of the IT technologies deployed in the PCD. Other key relationships are those with local IT and PACO (Process Automation, Control & Optimization) Engineering teams.

Your future duties and responsibilities:

Operate the PCD cyber security controls focusing on patching, anti virus, backup & restore, and asset inventory controls.
Provide IT support to the PCD through server system administration, workstation support, network support, and break/fix.
Maintain asset inventory and logical network drawings of PCD components documenting PCD systems, network traffic, and data interfaces.
Have an overview of security measures implemented and documented non compliance to information security requirements.
Provide subject matter expertise on PCD cyber security, network, and PCD system design to projects including architecture, risk assessment, and implementation phases.
Implement change management procedures and testing procedures for network and endpoint security and ensure endorsement from business. Patch and update network device firmware. Design, implement, and review firewall rules in line with Shell's cyber security best practices.

Required qualifications to be successful in this role:

6 + experience years implementing and managing IT security within an operating environment. Minimum Education or Certification: 4 year Degree related to IT, or relevant certifications. A strong understanding of international industrial cyber security standards and ecosystem.
Strong technical skills and experience network device configuration (switch, router, firewall) and systems administration (Wintel, Linux).
Cyber Security skills, including risk assessment. Engineering/PACO experience/certification is preferred.
Ability to work independently and with minimum supervision in a challenging and dynamic environment.
Strong and effective communication and interpersonal skills, suitable for different layers in business and IT.
Experience with Cisco, Fortinet, Active Directory, Antivirus solutions, SolarWinds, SPLUNK, and backup/restore tools is ideal.
Desired Certifications: Cyber Security: GICSP (Global Industrial Cyber Security Professional) Network: CCNA (Cisco Certified Network Associate) Server: Microsoft certifications (MCSE)

#LI-ST3
CGI is providing a reasonable estimate of the pay range for this role. The determination of this range includes various factors including but not limited to skill set level, geographic market, experience and training, and licenses and certifications. Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $85, - $,.

Use of the term ‘engineering’ in this job posting refers to the technical sense related to Information Technology (IT) and does not imply that the individual practices engineering or possesses the requisite license as prescribed by the applicable provincial or territorial engineering regulator. We are seeking individuals with expertise in IT engineering-related functions, but licensure from an engineering regulator is not a prerequisite for this position. Engineering is a regulated profession in Canada which is restricted in terms of use of titles and designation.

Skills:

• Active Directory
• Change Management
• Cisco
• Cyber Security Strategy
• Firewalling Fortinet
• Linux
• Splunk
• Wintel/Windows Server