Jobs → Customer Support → OT & CMMC Cybersecurity Expert

About the Role We are seeking an experienced OT & CMMC Cybersecurity Expert to assess, strengthen, and improve cybersecurity across Operational Technology (OT) and Industrial Control System (ICS) environments while ensuring alignment with Cybersecurity Maturity Model Certification (CMMC) requirements. Key Responsibilities • Assess OT/ICS environments, including SCADA systems, PLCs, industrial networks, and supporting infrastructure. • Conduct CMMC compliance assessments and gap analyses against applicable requirements, including NIST SP 800-171 and relevant NIST SP 800-172 requirements. • Evaluate OT network architecture, network segmentation, secure remote access, identity and access management, vulnerability management, and security monitoring. • Identify cybersecurity risks, control deficiencies, and compliance gaps across IT and OT environments. • Develop remediation roadmaps and recommend technical and procedural security improvements. • Review and strengthen security controls related to MFA, access management, logging, monitoring, vulnerability management, and incident response. • Prepare compliance documentation, policies, procedures, evidence repositories, and security control-mapping matrices. • Support CMMC assessment preparation, audit readiness, remediation tracking, and continuous compliance improvement. • Collaborate with IT security, OT engineering, infrastructure, risk management, and compliance stakeholders. Requirements • Strong experience in OT/ICS Cybersecurity, Industrial Network Security, or Industrial Control System Security. • Hands-on knowledge of SCADA systems, PLCs, industrial protocols, and OT network architecture. • Strong understanding of IT/OT network segmentation and industrial cybersecurity best practices. • Experience with CMMC compliance and NIST SP 800-171. • Knowledge of applicable NIST SP 800-172 requirements, where relevant to the assessment scope. • Experience conducting cybersecurity assessments, compliance gap analyses, and risk assessments. • Knowledge of security controls covering IAM, MFA, secure remote access, vulnerability management, logging, monitoring, and incident response. • Ability to develop remediation plans, maintain compliance evidence, and prepare audit-ready documentation. • Strong communication, technical documentation, stakeholder management, and cross-functional collaboration skills.