Ot/Ics Integration Engineer

The purpose of this effort is to create an integration with Schweizer Electric Labs (SEL)'s Operational Technology (OT) Software Defined Network (SDN) offering.

The objective of the integration is to:

• Parse SEL OT SDN flows
• Detect and identify tagged traffic, to include 802.1q (VLAN) tagging.
• Enrich traffic with Client Platform asset and communications data.
• Generate security event-based alerts in the Client Platform, surfacing the events and providing additional context based on enriched data.
• Correlate events to customer assets, collected communications, network IDs, source and destination subnets, and ingest source.
• Maximize the context around SEL SDN events and alerts in OT environments, and surface that context to the user.
• Build a connector for the Client Sitestore to pull asset and network information from the SEL 5056 flow controller

With the increasing popularity and implementation of SDN solutions in the OT/ICS space, Client is aiming to bridge the visibility gap within OT SDN security policy definitions and architecture by enriching events and alerts with relevant context about the assets, communication records, network ID associations, and relevant network information based on the source and destination devices leveraging SEL OT SDN networking infrastructure.

Skills and Requirements

• Firm understanding of OSI model, network communication protocols (IEEE 802) to include 802.1q (Trunking/VLAN tagging), and general understanding of LAN-based network security. Networking background a plus.
• Rust experience strongly preferred.
• Familiarity working with and parsing syslog.
• Demonstrated understanding of rule-based network security concepts.
• Experience working with and/or developing integration frameworks for 3rd party data sources.
• Experience working with Software Defined Networking technologies, SEL OT SDN or others.