Pcd/ot Integrity Lead Engineer

**The Role**:
**Dimensions**:
PCD/OT Integrity Lead Engineer is a senior-level individual technical contributor position reporting into QSGTL PCD/OT Integrity Team lead. It is a Site based position requiring daily travel to site (Ras Laffan) and visible site presence.

The role dimensions consist of:

- Subject Matter Expert in all site Process Control Domain (PCD) Technologies;
- continuous delivery of reliable and secure PCD in full compliance with QSGTL PCD Security Policy, meeting required reliability/availability targets for all components in QSGTL PCD Infrastructure (Network, Windows, Thin clients, VMWare, Antivirus and Backup solutions, System to System Interfaces);
- definition and execution of lifecycle management activities across a very large and complex PCD landscape with very short lifecycle duration (3-5 years);
- Act as QSGTL Site Focal: being the primary interface between central IT, IRM, PCD teams and QSGTL business communities; and guiding/supporting diverse business user communities;
- Continuously improve PCD-Integrity risk controls to ensure they remain effective given frequently changing threat landscape;
- Support PCD Team Lead and guide others;
- Be willing to go an extra mile in order to achieve business objectives.

**Organisation**:
PCD/OT Integrity Lead Engineer is part of the PCD/OT Integrity Team reporting to PCD/OT Integrity Team Lead, as part of overall Instrument Engineering team reporting to Instrument Engineering Manager.

**Principal Accountabilities**:

- Subject Matter Expert of site Process Control Domain (PCD) Technologies
- Responsible for all lifecycle maintenance activities of a large industrial network (design, deployment and maintenance)
- Responsible for delivery of reliable and secure PCD in full compliance with QSGTL PCD Security Policy, ensuring required production reliability and availability targets for all components in QSGTL PCD Infrastructure (Network, Windows, Thin clients, VMWare, Antivirus and Backup solutions, System to System Interfaces)
- Responsible for continuous monitoring and assurance of all elements of QSGTL PCD. Proactively identify/document deviations, design solutions and execute mitigations to always keep risks at ALARP.
- Responsible for design and execution of PCD/OT Integrity Lifecycle Management Plan, Plant Changes and Minor Projects (including Greenfield/Brownfield Project Support)
- Responsible for delivery of PCD Awareness training to QSGTL PCD User community (Operations, Engineering, Technology, Maintenance, Contractors, Peers)
- Responsible to continuously monitor and ensure PCD risk-controls/barriers are fully functional and effective given the current threat landscape (ex.: Device Firmware updates, Backup verification, Network Device Configuration Inspection, access control management, event logs/System alert inspection)
- Responsible for development and continuous improvement of QSGTL PCD-I standards, practices, maintenance tasks, and work instructions.
- Responsible to maintain PCD related documentation in an ever-green state
- Delivers front line support to all QSGTL PCD Users (Operations, Engineering, Technology, Maintenance, Contractors, Peers) to enable specific business objectives.
- Coaches and trains personnel in technical aspects of PCD-Integrity.
- Independently, diagnoses and resolves significant complex and non-routine problems related to PCD systems, networks, or cyber security controls
- Assesses performance of PCD-I cyber security controls and implement corrective action to strengthen the controls and improve compliance.
- Defines key performance indicators and associated work practices to track and improve performance of PCD-Integrity controls.
- Reviews PCD related changes in capacity of PCD Technical Authority
- Performs quality assurance of PCD-Integrity controls against applicable standards.
- Detects and acts on PCD/OT Integrity events and incidents.
- Proactively analyses PCD performance, identify bad actors and propose solutions.
- Proactively delivers continuous improvement of various elements of QSGTL PCD.
- Facilitates PCD-I risk assessments at business and discipline levels
- Independently designs, implements, maintains and modifies all aspects of PCD systems, including:
.backup and recovery controls

.physical access controls

.system and network logical and physical access controls

.end point security controls

.end point security work practices for specific vendor equipment

.network physical and logical separation controls

.backup and recovery systems and strategies

.technologies to detect security threat events in the PCD
- Ensures all activities within PCD/OT Landscape comply with Shell Production Operations Processes (Management of Change, Permit to Work, Asset Management System, Facilities Status Report, Proactive Technical Monitoring, Manage Threat and Opportunities, Maintenance in Execution, SAP, Fountain, other)

**Key Challenges**:

- Day to day administration of a very large and compl