OT Infrastructure & Cybersecurity Lead

Basic Function

The OT Infrastructure Specialist supports fleet-wide Operational Technology (OT) infrastructure used to operate industrial control systems across HF Sinclair sites. This position provides technical administration, troubleshooting, lifecycle support, documentation, backup and recovery, patch implementation, and project support for OT servers, endpoints, virtualization, networks, firewalls, and industrial control system infrastructure. The role reports to the  OT Infrastructure & Cybersecurity Lead  and coordinates closely with the OT Cyber Analyst, regional support teams, site OT teams, IT, vendors, and site stakeholders. Job Duties

(functions considered essential as defined by ADA)

Administer, maintain, and support Operational Technology (OT) infrastructure systems across fleet locations, including servers, virtualization platforms, network devices, industrial firewalls, endpoint platforms, backups, and supporting services.

Provide advisory and hands-on technical support, as appropriate, for OT infrastructure associated with Honeywell Experion PKS/FTE, Foxboro ICS, Siemens ICS, and other Industrial Automation and Control Systems (IACS) environments, including centrally managed platforms, approved fleet standards, escalated site support, and infrastructure lifecycle activities.

Assist with implementation, configuration, and lifecycle management of OT infrastructure standards, including system hardening, configuration baselines, patching, backup schedules, and disaster recovery procedures.

Deployment, configuration, lifecycle management, administration, and ongoing support of centrally managed OT infrastructure platforms and fleet-wide support tools and applications used across supported OT environments.

Coordinate with refinery operations, maintenance, reliability, OT, IT, vendors, and contractors to support safe and reliable OT system operation.

Maintain and improve OT infrastructure asset records, network documentation, system diagrams, configuration records, backup records, and infrastructure support documentation. Support efforts to ensure centrally managed OT assets and support platforms are accurately documented, visible, and supportable through approved fleet tools and reporting processes.

Perform or coordinate approved OT infrastructure maintenance activities in accordance with change management, management of change, and site operating procedures.

Support the implementation of security updates, operating system patches, application patches, and firmware updates for OT systems where validated and approved by the business.

Monitor OT infrastructure health, availability, capacity, and performance; troubleshoot hardware, operating system, virtualization, network, and communication issues.

Support incident response activities by providing technical analysis, system recovery assistance, log collection, and infrastructure restoration support.

Assist with vulnerability remediation and corrective action activities identified by the OT Cybersecurity Analyst, OT Cybersecurity Specialist, audit findings, or risk assessments.

Participate in technical and non-technical projects requiring OT infrastructure support and cybersecurity oversight to ensure standards, policies, procedures, and site requirements are followed.

Support vendor access coordination and vendor maintenance activities in accordance with company remote access, cybersecurity, and safety requirements.

Provide fleet guidance and technical support for OT infrastructure reliability, availability, backup, patching, and lifecycle practices.

Maintain familiarity with ISA/IEC 62443 concepts related to zones and conduits, asset management, system hardening, patch management, backup and recovery, and secure maintenance of IACS environments.

Special assignments or tasks assigned to the employee by their supervisor, as determined from time to time in their sole and complete discretion.   Experience

At least 4 to 7 years