This position is for an Industrial Control System Security & Governance Manager in the Controls & Security Technology Solutions Group. This position will be primary responsible for providing consistent architectural design, governance, technical consulting, high-level support and oversight for Hershey’s Industrial Control Systems (ICS) & SCADA. As part of this responsibility, appropriate ICS administrative policies, procedures, and standards will be defined, implemented and maintained. In this function, the manager will be working directly with other Engineers (ICS, Process and Packaging & Facilities), Capital Project Management, Operations Planning, Manufacturing, Quality Assurance, Product Development, and Marketing personnel. This individual will be required to maintain a high level of knowledge in various technologies such as Client/Server, Cluster Servers (VMs), Industrial Networking including wireless and mesh networks, Industrial Security Systems (Firewalls, Routers/Switches, VPNs), Industrial Network Protocols, and Industrial Internet of Things (IIoT). This individual will also be require to provide Governance & Oversight for the Industrial SCADA and HMI solutions management (Operating Systems, System Patching, Disaster Recovery and administration).
Provide Governance and support for Industrial Control Network Architecture in accordance to the corporate standards
Provide Governance and support for Industrial Control Systems Security (firewalls, routers/switches, VPNs, etc.)
Provide Governance and support for Industrial Control Systems Solutions (Servers/SCADAs, HMIs, OS, Patching Systems, Disaster Recovery, etc.)
Provide Governance and support for Industrial Internet of Things (Edge, Fog, Cloud, etc.)
Prepares ICS feasibility assessments and capital cost estimates for various manufacturing, facilities and industrial automation.
Responsible for providing subject matter expertise (SME) for ICS technologies to ensure security, control reliability and data acquisition through ongoing collaboration with Manufacturing Operations, Plant Technical Assurance, IS Digital Manufacturing and Capital Project Delivery Teams.
Maintain a technical laboratory for executing the testing and evaluation of ICS technologies.
Provide ICS SME consulting to support design, architecture, specification and technical review & acceptance of industrial control systems, SCADA/DCS Platforms and supporting infrastructure.
Provide ICS security awareness and standards training to engineering and manufacturing operations.
Maintaining an up-to-date knowledge of the developments and trends in ICS technologies, IIoT/I4.0 and Cybersecurity for possible application in The Hershey Company to protect ICS assets and to accelerate our digital transformation. This is done through reviewing trade journals, participating in professional societies; attending trade shows and seminars consulting suppliers and partnering with other food manufacturing companies.
BS Degree in Electrical Engineering, Electrical Engineering Technology or other engineering / engineering technology with expertise and experience in Industrial controls security protocols and governance.
10+ years experience in automation solutions including industrial control networking & security.
Experience in leading/supporting multiple projects is required.
Working knowledge of standard industry PLC and SCADA/HMI systems.
Advanced knowledge of Security & Industrial Control Network architecture, servers, virtualization, data integration & data historians is essential.
Minimum Knowledge, Skills, and Abilities Required to Successfully Perform Major Duties/Responsibilities:
Governance and Support:
Developing Industrial Control Systems suitable for implementation in a manufacturing facility within the commercialization timeline and budget
Security design process, defense-in-depth/breadth, engineering life cycle, information domains, cross domain solutions, identification, authentication, and authorization, system integration, risk management, intrusion detection, contingency planning, incident handling, configuration control, change management, auditing, and security testing
Securing cross-domain IT/OT communications and pathways
Securing systems running ICS-related communications protocols (Ethernet/IP, OPC, MODBUS, Profinet, etc.) Data Formats
Completing system assessments and security audits based on technical security frameworks such as NIST 800-53/800-82, ISO 27001, IEC 62433, etc. Ability to configure Basic Business Intelligence Dashboards and Reports
Applying whitelisting solutions in ICS environments
Applying skills across a broad range of domains (ICS, OT and IT)
The incumbent must understand the fundamentals of technical security risk assessment
Capital Project Support:
Threat landscape of network-connected ICS technology
NEC and OSHA requirements for electrical installations, as well as possess the appropriate level of experience with electrical construction trade practices for industrial installations.
PFD’s, P&ID’s, Electrical Elementaries and GMP’s.
Engineering security solutions for real-time and/or performance-sensitive systems
Developing simulated ICS environments within a virtual infrastructure
Design, specification, application, installation, configuration, programming and maintenance of Industrial Control Systems - which include: Robotics, AGVs, PLC’s, Motion Control Systems, Fieldbus Networks, Industrial Control Networks and HMI/SCADA Systems.
PLC logic and integration of enterprise and control systems. Knowledge of S88 and S95 preferred.
Designing state of the art, cost effective ICS systems for the support of capital projects for the corporation.
Managing multiple disciplines (external and internal) to bring Industrial Control Systems from the design stage to production.
Strong troubleshooting skills.
Ability to prioritize, and understand the required business objectives, develop solutions, control schedules, and drive efficient and expedient project executions.
Possess the appropriate skills to execute projects and other job related duties from inception to completion.
Excellent oral and written communication skills.
Innovative and creative problem solving skills.
Ability and willingness to work in a team environment and work with limited supervision.
Ability, willingness and demonstrated experience in accomplishing project related responsibilities within critical time restraints to meet corporate objectives.
Ability to apply personal integrity to drive best solution for the department and the company while providing the customer with a strong performing manufacturing system for the manufacture of our confectionary products.
Excellent interpersonal skills.
Must be open to and comfortable with change.
Open to travel (including International) based on assignment (>20%).
The Hershey Company is an Equal Opportunity Employer. The policy of The Hershey Company is to extend opportunities to qualified applicants and employees on an equal basis regardless of an individual's race, color, gender, age, national origin, religion, citizenship status, marital status, sexual orientation, gender identity, transgender status, physical or mental disability, protected veteran status, genetic information, pregnancy, or any other categories protected by applicable federal, state or local laws.
The Hershey Company is an Equal Opportunity Employer - Minority/Female/Disabled/Protected Veterans