Cs Iacs Identity

**CS IACS Identity & Secrets Engineer**

**About SLB**

**About the Bogota Information Technology Center (BITC)**

The Bogota Information Technology Center (BITC) has a fundamental and critical role in SLB corporate transformation and for delivering digital solutions to the larger organization. Our company has embarked on a corporate transformation to deliver a step change in the reliability, efficiency and integration of our technologies, products and services. Advanced technologies are key enablers to this and encompass all aspects of business systems, including the organization platform and processes. Investments in, and building strong competences across our technology pillars - SAP, Digital Enterprise Systems, Data and Analytics, Digital Operations, Security are key to an integrated digital that is positioned to deliver superior results.

**About this role**

The Cyber Security IACS Identity Engineer is responsible for helping define, develop, and curate the necessary standards and controls required for the protection of Schlumberger’s IACS (Industrial Automation & Control Systems) environments, across our enterprise, manufacturing, and digital portfolios.

This position requires an individual with strong knowledge of business processes, a thorough understanding of cyber, IT, Identity Management, engineering/architecture, industrial automation, control system technologies, and program management.

The Cyber Security IACS Identity Engineer proactively works within the IT cyber security function and Schlumberger Divisions, and in partnership with corporate stakeholders to integrate IACS cybersecurity adoption transparently into the business.

The Cyber Security IACS Identity Engineer is responsible for architecture and design of an Identity Management program from an OT perspective. He / She has the responsibility to oversee, develop, align and approve and perform other necessary tasks across the scope of the IACS program (Stages 2 and beyond - see below).

**Qualifications and Requirements**
- Essential qualifications_
- Experience working in IT within enterprise organizations.
- Experience supporting both business users (non-IT) and IT users.
- Experience supporting any directory service (AD, AAD, LDAP, etc).
- Sound understanding of DNS.
- Able to think critically about requests and situations to make good choices and take the right action.
- Able to think logically and troubleshoot.
- Maintain agreed KPIs and targets.
- Key contributor to the IACS cyber security program, standards, and associated processes defined through development of the program
- Participates in the establishment of an IACS-specific information security identity strategy and reference architecture, including supporting standards and frameworks that are aligned with the overall business strategy.
- Provides support developing and maintaining security assessment practice documentation i.e., policies, plans, processes, procedures, guidelines, standards, methodologies, report templates, questionnaire templates.
- Assess assigned security project tasks and milestones and collaborate with team members according to their respective strengths.
- Performs daily checks on outstanding project tasks keeping the team and management updated with completed milestones.
- Provide feedback to management on performance issues and improvements on implemented security project approaches, processes, procedures, methodologies etc.
- Communicates and coordinates adoption of IACS cyber security requirements to defined stakeholders across the organization
- Ensures that controls defined align with selected external frameworks and standards, such as ISA99, ISO/IEC, NIST-SP & CSF Framework, and aligns with regulatory, internal or customer requirements.
- Develops, updates, and maintains the security architecture roadmap and corresponding reference architecture elements to guide the business in developing solutions that utilize repeatable patterns for the purposes of securing the OT landscape.
- Actively support deployment and execution an IACS cyber security awareness program to educate relevant personnel
- Integrates IACS secure systems development processes with security policies and information protection strategies.
- Defines requirements for monitoring and responding to cyber security risks impacting IACS systems.
- Supports continued development of the IACS cyber security program to mitigate current and emerging threats.
- Contributes to the development of training program and delivery of IACS security training to target groups.
- Stays current with the evolving threat landscape to IACS security and high-profile attacks on IACS systems.
- Fundamental understanding of IT and OT network communication protocols (For example: TCP/IP, UDP, DNP3, Modbus, IEC 61850, OPC, OPC UA, PROFINET, etc.).
- Knowledge of common information security management frameworks, such as ISO/IEC 27001, ITIL, and NIST.
- Knowledge of assessing against standards and frameworks