Penn State Job Catalog

Additional levels that exist for this job profile can be seen below.
Missing levels within the leveling matrix can be added based on business need.

The defined natural career progression within or between job profiles.

Facilities Automation Systems Security Engineering

The Facilities Automation Systems Security Engineer serves as a subject matter expert in Operational Technology (OT) cybersecurity and is responsible for securing Building Automation Systems (BAS), Supervisory Control and Data Acquisition (SCADA) systems, Laboratory Monitoring Systems, and other facility automation technologies; designs, implements, and maintains cybersecurity controls that protect critical facility infrastructure, operational continuity, and safety-related systems; leads complex cybersecurity initiatives, conducts risk assessments, investigates security incidents, and develops secure architectures for automation and control systems; collaborates with facilities, engineering, information security, and operational teams to ensure compliance with cybersecurity standards, regulatory requirements, and industry best practices, while supporting the reliable operation of mission-critical environments.

• Design, implement, and maintain cybersecurity controls for BAS, SCADA platforms, Laboratory Monitoring Systems, and related OT environments
• Conduct risk assessments, vulnerability analyses, security reviews, and threat modeling activities to identify and mitigate risks to facility automation systems
• Develop and implement secure architectures, network segmentation strategies, defense-in-depth controls, and secure remote access solutions for OT environments
• Monitor OT networks and systems for cybersecurity threats, anomalous activity, and operational risks; investigate and coordinate response to security incidents and system compromises
• Lead system hardening, secure configuration, patch management, and vulnerability remediation efforts for automation servers, controllers, field devices, and supporting infrastructure
• Evaluate, test, deploy, and administer OT cybersecurity technologies, including monitoring, detection, access control, and asset management solutions
• Assess and maintain compliance with applicable cybersecurity frameworks, standards, and regulations, including OT-specific security requirements and best practices
• Develop and maintain security policies, standards, procedures, and technical documentation related to facility automation and control systems
• Perform security audits, configuration reviews, and operational assessments to improve the security posture and resilience of OT environments
• Analyze threat intelligence, emerging vulnerabilities, and industry trends to identify risks and recommend mitigation strategies
• Collaborate with facilities, engineering, safety, and information security teams to integrate cybersecurity requirements into automation projects, system upgrades, and operational processes
• Review vendor solutions, system designs, and contractor activities to ensure compliance with cybersecurity and operational requirements
• Participate in system commissioning, testing, and implementation activities to validate security controls and operational readiness
• Track and support procurement, licensing, budgeting, and lifecycle management activities related to OT cybersecurity technologies and services
• Provide guidance on OT cybersecurity practices, technologies, and risk management strategies
• Prepare and deliver technical reports, risk assessments, recommendations, and briefings for management, project teams, auditors, and other stakeholders
• May supervise staff members, including hiring, development, and performance management

Level:

– Senior Professional

Base Description:

– Completes activities, tasks, and/or projects of a functional nature.

Level Summary:

– Demonstrates advanced knowledge of principles, practices, and procedures of a particular field. Works independently on moderately complex work assignments under limited oversight, reviews progress, and evaluates results. Monitors work and projects ensuring timeliness, quality, and efficiency. Identifies and mobilizes resources to achieve outcomes. Trains others and reviews progress with management. Presents ideas, concepts, and instructions in a clear and persuasive manner. Develops new techniques, concepts, and approaches and applies them to moderately complex and strategic and/or operational issues.

Supervisory Responsibilities:

– Indirect supervisor for other full–time employees
– May serve as direct supervisor for part–time, student, and/or temporary workers, volunteers, or a full–time employee

Fiscal Responsibilities:

– May validate and pay invoices
– Monitors and tracks budgets and funding

Problem Solving:

– Encounters moderately complex problems
– Applies specialized knowledge and skills to resolve problems
– Understands benefits, limitations, and impact of potential solutions

Independence of Action:

– Works independently on moderately complex work assignments, reviews progress, and evaluates results
– May set priorities and organize work within general guidelines established by supervisor
– May review the work of others to verify accuracy and conformance to required procedures and special instructions

Communication and Collaboration:

– Communicates internally within working unit and the University
– Communicates with external audiences for scheduling/coordination
– May communicate with external audiences for business purposes
– Coaches others in using appropriate strategies for resolving conflict; negotiating reasonable compromises; and proposing and evaluating possible solutions
– Give candid and constructive feedback to others to influence and persuade managers and employees to accept and implement findings and recommendations

• Comp Grade – 13
• Minimum – $91,488.00
• MidPoint – $114,384.00
• Maximum – $137,280.00