About Us

A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting-edge of digital transformation and technology. From the multi-cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there’s something for everyone to get stuck into. And that’s where you come in.

Job Description

Hitachi Rail is looking for an enthusiastic self-motivated OT Network Security Engineer who thrives in a fast‑paced environment. The successful candidate is comfortable performing a wide range of tasks from administrative to strategic. This is a fulltime permanent position based in Brisbane, Australia.

In this role you will design, implement, integrate, optimise and validate network security and firewall infrastructure for railway and critical‑infrastructure projects. The role combines security architecture ownership with hands‑on engineering and implementation responsibility, ensuring that cybersecurity platforms and controls are deployed according to international standards, project requirements, and local regulatory frameworks.

You will act as the technical go‑to point for anything related to network security and firewalls, supporting the full lifecycle from design through commissioning and operational handover.

Key accountabilities

OT Network Security Architecture

- Design end-to-end OT network security architecture.
- Define technical standards, reference architectures, and design patterns for network security platforms.
- Design & Implementation of Network Security Platforms

Design, deployment, configuration,



and validation of Juniper Firewalls including the following network security components:

- Network and perimeter security
- Network access and identity
- Threat detection and endpoint security
- Network Intrusion Detection/Prevention Systems
- Standards Compliance & Security Assurance

Produce and review security architecture documents, design justifications, configuration standards, and hardening guides.

Testing, Validation & Commissioning

Define and execute security FAT/SAT, configuration and hardening validation, functional tests for security controls, and integration testing with OT subsystems.

Technical Coordination & Project Support

- Managing changes through CCR and CCB
- Serve as the primary point of contact for cybersecurity infrastructure within the project team.
- Coordinate implementation activities with:
- Cybersecurity engineers
- Network & system engineers
- Ability to work onsite at Customer’s premises (around inner Brisbane)

Regulatory & Local Compliance Awareness

- Ensure cybersecurity infrastructure designs can be adapted to national cybersecurity regulations, critical infrastructure protection laws, and data protection and logging constraints.
- Support alignment with local authorities, regulators, and assessors without hard‑coding country‑specific requirements into architectures.





Required skills and knowledge

We know talented people don’t always tick every box. If you meet many, but not all of the criteria below, we’d still love to hear from you.

- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Telecommunications Engineering, Automation Engineering, Electrical/Electronic Engineering, or equivalent technical disciplines.
- Preferred: Existing RIW (Rail Industry Worker) qualification or is able to obtain RIW.
- Preferred: Understanding of ETCS technology or experience working within the Rail environment will be advantageous.
- Minimum 5 years of professional experience in IT/OT Cybersecurity infrastructure, with demonstrated responsibility for network security.
- Strong hands‑on experience with Juniper firewalls.
- Strong troubleshooting skills: packet captures, log analysis, traffic flow tracing, and root cause analysis.
- Solid understanding of TCP/IP, routing, DNS, proxy concepts, PKI, and SSL/TLS inspection
- Highly Regarded: Experience delivering cybersecurity infrastructures across critical‑infrastructure sectors such as railway, transportation, energy/utilities, oil & gas, or other critical infrastructure environments.
- Highly Regarded: Experience in applying the following Cybersecurity standards and framework:
- IEC 62443
- CLC/TS 50701
- NIST 800-82 / 800-53
- ISO 27001 / ISO 27005

Skilled Competencies

- Pragmatic engineering mindset with solid security fundamentals.
- Ability to balance cybersecurity, availability, safety, and operational constraints.
- Comfortable working in multicultural, i

📌 OT Network Security Engineer (Brisbane)
🏢 Hitachi
📍 Brisbane