高级游乐设备控制系统安全工程师 - 运营技术 Ride Control Sys Engineer Senior

职位介绍：

你是否是一名对网络设计与网络安全抱有浓厚兴趣且具备相关才能的运营技术（OT）或工业控制系统（ICS）工程师？

作为高级游乐设备控制系统安全工程师，你将加入华特迪士尼幻想工程的游乐设备工作室，参与多个游乐设施项目。你需负责全球各地迪士尼乐园新建游乐设施项目的网络架构设计、网络安全设计及落地实施工作。诚邀你加入我们 —— 在高度协作、自主驱动的工作氛围中，引领前沿网络技术在迪士尼游乐设施中的应用！

工作内容：

主导各类大型、高度复杂且具创新性的游乐设施自动化及嵌入式控制系统相关的运营技术（OT）/ 工业控制系统（ICS）网络架构与网络安全系统的研发、设计及落地实施工作。 主导游乐设施系统网络的工程设计与分析工作，核心聚焦自动化系统架构领域。

• 设计并测试游乐设施的网络安全解决方案及网络架构；
• 设计、建模并分析数据网络通信系统；
• 调研并测试新产品、新技术及新方法，开展方案权衡分析；
• 制定并提出全新的网络安全及网络架构概念与标准。

主导游乐设备控制系统网络及网络安全架构相关标准与制度的制定工作；与项目团队协作，为网络需求梳理、落地实施及问题解决提供支持。

• 与游乐设施开发团队协作，设计并交付游乐设施网络系统；
• 针对高可用性实时系统，制定并分析 OT 网络性能要求；
• 制定并梳理需求规格及功能规范，形成文档、图纸及模型文件；
• 制定游乐设备控制系统网络系统的实施计划及预算方案；
• 研发并制作概念验证用样机及原型产品；
• 制定测试需求及测试文档，推进游乐设施网络的安装与调试投运工作。
• 牵头完成项目既定范围目标；
• 建立有效的外部合作关系；
• 跨领域与其他部门开展对接协作；
• 能够为概念研发工作提供支持；
• 具备同时管理多个复杂项目的能力；
• 展现出色的领导特质与能力；
• 秉持专业素养与职业操守；
• 聚焦结果导向，推动目标达成。

我们希望您：

• 具备至少 5-10 年高度网络化自动化系统、过程控制系统及工业控制系统的设计、工程实施、安装与调试投运经验；
• 具备至少 5-10 年网络系统设计、安装及配置经验；
• 具备至少 5-10 年 Linux 与 Windows 系统管理经验；
• 具备网络设计与分析相关实践经验，能够保障并平衡网络可用性、性能、弹性及安全性；
• 了解高可用性工业及嵌入式应用中使用的有线及短距离无线通信网络；
• 深入理解各类通信技术 / 协议：TCP/IP、CAN 总线、串行通信、ProfiNET、以太网 / IP（Ethernet/IP）、EtherCAT、802.11；
• 具备高可用性安全关键系统的控制与监测领域无线通信应用经验；
• 具备网络及系统漏洞评估与修复相关实践经验；
• 熟悉网络安全技术，包括防火墙、终端安全解决方案、虚拟专用网络（VPN）、网络安全监控与检测、安全信息与事件管理（SIEM）；
• 具备扎实的技术文档撰写能力；
• 能够接受国内外出差，出差时长灵活（最长可达 3 个月）；
• 能够同时处理多个复杂项目，协调团队工作，合理管理任务优先级；
• 能够持续跟进 OT/ICS 系统中不断变化的网络及网络安全相关动态与知识。

• 精通罗克韦尔和西门子自动化系统架构及组件；
• 具备故障安全及安全相关系统的设计与分析经验；
• 具备多任务软件平台及设计方法相关经验；
• 具备有线及无线网络设计与配置经验；
• 具备防火墙、VPN、网络安全监控及漏洞评估工具使用经验；
• 具备大型控制系统的设计、工程实施、安装与调试投运经验；
• 具备外部供应商管理经验；
• 具备技术问题解决经验；
• 具备资本性项目交付经验；
• 具备风险分析技术及系统安全设计经验；
• 了解软件配置管理 / 版本控制工具；
• 持有高级思科（Cisco）认证、GIAC（全球信息保障认证）或其他相关网络及网络安全认证者优先考虑。

• 最低要求：获得正规大学工程学、计算机科学或相关专业学士学位，电子工程专业优先。

Job Summary:

Are you an OT or ICS engineer who has an interest and aptitude for network design and cyber security?

As a Ride Control Systems Security Engineer Senior, you will work within Walt Disney Imagineering’s Ride Studio on multiple ride attraction projects and are responsible for network architecture and cyber security design and implementation activities on new ride projects for installation in all our parks across the globe.  Join us in a highly collaborative and self-directed atmosphere to lead efforts applying leading edge network technology on Disney rides!

What You Will Do

Lead Operational Technology (OT)/ Industrial Control Systems (ICS) network architecture and cyber security systems development, design, and implementation for automation and embedded control systems on a wide variety of large-scale, highly complex, and innovative ride systems.

Lead the performance of engineering design and analysis for ride system networks, with focus on automation system architecture.

• Design and test cyber security solutions and network architectures for ride systems.
• Design, model, and analyze data network communication systems.
• Research and test new products, technologies, and methodologies and conduct trade-off studies.
• Prepare and propose new cyber security and network architecture concepts and standards.

Lead standards and policies development for ride control network and cyber security architectures.  Collaborate with and support project teams on network requirements, implementation, and issues.

• Collaborate with attraction development teams to design and deliver ride networks.
• Develop and analyze OT network performance requirements for high availability real-time system.
• Develop and capture requirements and functional specifications in documents, drawings, and models.
• Develop implementation plans and budgets for ride control network systems.
• Develop and implement mock-ups and prototypes for proof-of concept efforts.
• Develop test requirements and documents and conduct ride network installation/commissioning efforts.
• Leads completion of project scope
• Establishes effective external alliances/relationships
• Works outside the engineering community to interface with other departments
• Able to contribute to "Blue Sky" concept development efforts
• Ability to manage multiple complex efforts simultaneously.
• Demonstrates leadership traits and capabilities
• Demonstrates professionalism & ethics
• Drives results

What To Bring:

• At least 5-10 years of experience with design, engineering, installation, and commissioning of highly networked automation, process control, and industrial control systems
• At least 5-10  years of experience in network systems design, installation and configuration
• At least 5-10 years of experience with Linux and Windows system administration experience.
• Demonstrated experience in network design and analysis approaches to ensure and balance network availability, performance, resiliency and security
• Knowledge of wired and short-range wireless communication networks used in high availability industrial and embedded applications
• Solid understanding of communication technologies/protocols: TCP/IP, CAN, Serial, ProfiNET, Ethernet/IP, EtherCAT, 802.11
• Demonstrated experience in wireless communications for control and monitoring high-availability safety critical systems
• Demonstrated experience evaluating and remediating network and system vulnerabilities
• Demonstrated experience with cyber security technologies including firewalls, endpoint security solutions, VPNs, network security monitoring and detection, and security information and event management (SIEM).
• Solid skills in technical document writing
• Ability to travel and work both domestically and internationally, for varying durations that could be up to 3 months
• Ability to handle multiple complex efforts simultaneously, coordinate team efforts, and manage tasks and priorities
• Ability to maintain knowledge of constantly changing network and cyber security concerns in OT/ICS systems.

• Proficient in Rockwell and/or Siemens automation systems architecture and components
• Experienced in fail-safe and safety-related system design and analysis
• Experience with multitasking software platforms and design approaches
• Experience with wired and wireless network design and configuration
• Experience with firewalls, VPNs, network security monitoring, and vulnerability assessment tools
• Experience with the design, engineering, installation and commissioning of major control systems
• Experience with outside vendor management
• Experience with technical issue resolution
• Experience with Capitalized Project Delivery
• Experience with hazard analysis techniques and system safety design
• Knowledge of software configuration management/version control tools
• Advanced Cisco, GIAC, or other relevant network and cyber security certifications strongly preferred
• As a minimum a Bachelor of Science Degree in engineering, computer science, or related field from an accredited university, Electrical Engineering preferred