Cybersecurity Engineer - Railway and CCoP

ALTEN Group is a world leader in Engineering and Technology consulting services providing outsourced Engineering, R&D, and IT Services for different industries such as Transportation, Defence, Energy and Security with 55,000 engineers in nearly 35 countries. ANOTECH is the subsidiary of the Group delivering ALTEN's Engineering Services in Singapore.

As a Cybersecurity Engineer, you will support the design, implementation, operation, and cybersecurity compliance of IT and OT networks for railway projects in Singapore. The successful candidate will have experience implementing and maintaining network infrastructure in accordance with Singapore's Cybersecurity Code of Practice (CCoP) requirements, particularly within Critical Information Infrastructure (CII), transportation, or rail environments.

The role will be responsible for ensuring that railway operational systems, networks, and supporting infrastructure meet cybersecurity, availability, and regulatory requirements throughout the project lifecycle.

Responsibilities:

Network Infrastructure Design & Implementation:

. Design, implement, and maintain enterprise and operational technology (OT) network infrastructure for railway systems.

. Configure and support routers, switches, firewalls, VPNs, wireless networks, and network security appliances.

. Implement network segmentation, redundancy, and high-availability architectures.

. Develop IP addressing schemes, VLAN structures, and secure connectivity solutions.

. Support data center, server, virtualization, and cloud-based infrastructure where applicable.

CCOP & Cybersecurity Compliance:

. Implement and maintain cybersecurity controls in compliance with Singapore's Cybersecurity Code of Practice (CCOP).

. Participate in cybersecurity risk assessments, gap assessments, and remediation activities.

. Support CII cybersecurity compliance initiatives and audits.

. Develop and maintain cybersecurity documentation, policies, standards, and procedures.

. Ensure compliance with regulatory and project-specific cybersecurity requirements.

. Coordinate with cybersecurity teams, regulators, consultants, and auditors during compliance assessments.

Railway Systems Support:

. Support railway operational and business systems including:

. SCADA

. Signalling Interfaces

. Passenger Information Systems (PIS)

. CCTV Systems

. Public Address Systems

. Ticketing and AFC Systems

. Operational Control Centre Networks

. Manage integration activities between IT and OT environments.

. Support system upgrades, migrations, and technology refresh programs.

Security Operations:

. Monitor network and security events.

. Support vulnerability assessments, penetration testing, and remediation activities.

. Implement endpoint protection, firewall policies, access control mechanisms, and security monitoring solutions.

. Participate in cybersecurity incident response and recovery activities.

. Maintain backup and disaster recovery capabilities for critical systems.

Testing and Commissioning:

. Prepare and execute FAT, SAT, and commissioning activities.

. Verify cybersecurity controls during testing and handover.

. Support system acceptance and operational readiness activities.

. Resolve network and security-related issues during project implementation.

Documentation and Stakeholder Management:

. Prepare and maintain:

. Network Design Documents

. Security Architecture Documents

. Risk Assessment Reports

. Compliance Evidence and Audit Records

. Operations & Maintenance Manuals

. As-Built Documentation

. Coordinate with project managers, cybersecurity teams, railway operators, vendors, and regulatory stakeholders.

Essential Requirements:

. Bachelor's Degree in Information Technology, Computer Science, Computer Engineering, Network Engineering, Cybersecurity, or related disciplines.

. Minimum 5 years of experience in network engineering, IT infrastructure, or cybersecurity.

. Hands-on experience implementing cybersecurity controls aligned with Singapore CCOP requirements.

. Experience working in railway, transportation, critical infrastructure, industrial, or OT environments.

. Experience supporting cybersecurity audits, compliance assessments, or regulatory reviews.

. Experience managing both IT and OT network environments is highly preferred.

. Strong knowledge of:

. TCP/IP Networking

. Routing & Switching

. VLANs

. Firewalls

. VPN Technologies

. Network Segmentation

. Windows and Linux Administration

. Active Directory

. Virtualization Technologies

. Familiarity with:

. Cybersecurity Risk Management

. SIEM Platforms

. Vulnerability Management

. Endpoint Security

. ICS / OT Security

. NIST, ISO 27001, IEC 62443 frameworks

. Preferred Certifications:

. CCNA / CCNP

. Fortinet NSE / FCP

. Palo Alto PCNSA / PCNSE

. CISSP

. CISM

. CompTIA Security+

. GIAC Certifications

. Certified Information Security Manager (CISM)