Bryne, Rogaland, Norway
Specializing in securing industrial automation and control systems, my expertise lies in aligning network design with rigorous IEC 62443 standards. Crafting robust cybersecurity architectures, my role at Aibel has been pivotal in safeguarding key assets in the Norwegian Oil and Gas sector. Previously, as a Senior Network Engineer, I spearheaded the integration of ICT systems into complex Oil & Gas projects. With a solid foundation in cyber defence and computer networking, my mission is to deliver security solutions that are not only effective but also resilient in the face of evolving threats. The practical application of my skills is evident in successfully partitioning systems into zones and conduits, a testament to my analytical and customer-focused approach.
Current Role – Key Responsibilities: ✅ Advanced Network Architecture & Design Lead the design and implementation of secure network topologies for industrial automation and control systems, ensuring full alignment with IEC 62443 and other relevant cybersecurity standards. ✅ System Scoping & Asset Identification (SuC) Define and document Systems under Consideration (SuC) across complex industrial environments, establishing a clear foundation for risk management and security planning. ✅ Zone & Conduit Modeling Develop and refine zone and conduit models to enforce logical segmentation, reduce attack surfaces, and support defense-in-depth strategies. ✅ Strategic Risk Assessments Conduct comprehensive high-level risk assessments to identify vulnerabilities, evaluate threat vectors, and prioritize mitigation strategies across OT/ICS networks. ✅ Security Level Targeting Determine appropriate Target Security Levels (SL-T) based on risk profiles, operational requirements, and compliance obligations, ensuring tailored and effective security controls. ✅ Cybersecurity Enablement & Training Design and deliver cybersecurity workshops and awareness sessions for internal teams and client stakeholders, promoting a culture of security and operational resilience. ✅ Technical Documentation & Reporting Produce detailed documentation, including network diagrams, security architecture blueprints, and compliance reports to support audits, stakeholder communication, and project delivery. ✅ Risk & Vulnerability Analysis (RVA) Facilitate RVA workshops focused on client-specific infrastructure, identifying critical vulnerabilities and recommending actionable remediation plans. ✅ Risk Lifecycle Management Maintain thorough records of initial and residual risks, documenting mitigation actions and tracking progress to ensure continuous improvement in security posture.
Applied IEC 62443 standards to strengthen cybersecurity across industrial automation and control environments. Led the development and execution of risk management and protection strategies for critical operational systems. Engineered and maintained secure IT/OT network architectures, ensuring alignment with regulatory and industry security frameworks.
Ensuring compliance with IEC 62443 standards to protect industrial automation and control systems. Designing cybersecurity protocols and implementing risk assessments to safeguard critical infrastructure. Creating detailed network topologies aligned with industry security standards.
As an Automation, ICT/Cyber Security Consultant specializing in the Norwegian Oil and Gas industry, My key responsibilities center around ensuring compliance with IEC 62443 standards and securing industrial automation and control systems. My duties include: ✅Network Design: Engage in designing networks and creating detailed topologies for industrial automation and control systems, ensuring they align with the IEC 62443 standards. ✅Systems Under Consideration (SuC): Identify and recognize the Systems under Consideration within the industrial environment, laying the foundation for subsequent security measures. ✅Zones and Conduits: Partition the Systems under Consideration into zones and conduits, establishing boundaries and segregation to enhance security. ✅High-Level Risk Assessments: Conduct high-level risk assessments to identify potential vulnerabilities and threats in the industrial network infrastructure. ✅Target Security Level Determination: Evaluate and determine the target security level for the industrial systems, ensuring that the security measures are appropriately aligned with the assessed risks. ✅Cyber Security Workshops: Organize and conduct cyber security workshops to educate stakeholders and personnel involved in the industrial processes about the importance of cyber security and best practices. ✅Comprehensive Documentation: Create detailed documentation, including comprehensive topologies and network illustrations, to provide a clear understanding of the current state and proposed security measures. ✅Risk Vulnerability Analysis (RVA): Lead or facilitate Risk Vulnerability Analysis workshops, specifically focusing on client network equipment and infrastructure, to identify potential vulnerabilities and assess their associated risks. ✅Risk Documentation: Document both the initial risk assessments and the mitigated risks, providing a record of the security measures implemented to address identified vulnerabilities. 🚩 Customers: Equinor
Designed network solutions to support an Integrated Operation Strategy, focusing on secure data flow and reliability. Implemented cybersecurity frameworks to protect high-value assets and data, aligned with IEC 62443.
As a Senior Integrated and ICT Engineer, I was responsible for leading and managing complex projects within the Oil & Gas industry, focusing on integrating Information and Communication Technology (ICT) systems. My key responsibilities included: My duties include: ✅Project Management: Led the planning, design, and execution of ICT integration projects, ensuring timely delivery and adherence to project specifications and industry standards. ✅System Integration: Coordinated the integration of various control systems, including Distributed Control Systems (DCS), Safety Instrumented Systems (SIS), and Supervisory Control and Data Acquisition (SCADA) systems with ICT networks. ✅Cybersecurity: Ensured compliance with IEC 62443 and other relevant cybersecurity standards by implementing security measures and conducting risk assessments for industrial control systems. ✅Vendor and Stakeholder Management: Collaborated with vendors, contractors, and stakeholders to align ICT solutions with project goals, addressing technical challenges and ensuring seamless integration. ✅Documentation and Compliance: Prepared detailed technical documentation, including design specifications, integration plans, and cybersecurity reports, ensuring compliance with industry standards and company policies. 🚩 Customers: Altera , Equinor
Responsibilities: Network Design and Architecture: Lead the design and architecture of satellite communication networks, considering scalability, reliability, and performance requirements. Collaborate with cross-functional teams to develop comprehensive network solutions that meet the company's strategic goals. ✅Project Management: Manage end-to-end project lifecycles, from planning and design to implementation and optimization, ensuring timely delivery of network projects. Coordinate with internal teams and external vendors to align project milestones with business objectives. ✅Satellite Ground Station Operations: Oversee the operation and maintenance of satellite ground stations, ensuring continuous availability and reliability of satellite communication links. Troubleshoot and resolve complex technical issues related to ground station equipment and network infrastructure. ✅Quality Assurance and Testing: Develop and implement testing procedures to validate the performance and security of satellite communication networks. Conduct regular audits and assessments to ensure compliance with industry standards and best practices. ✅Collaboration and Communication: Collaborate with cross-functional teams, including hardware engineers, software developers, and system administrators, to integrate network solutions seamlessly into overall satellite systems. Communicate effectively with stakeholders, providing regular updates on project progress, challenges, and resolutions. ✅Emerging Technologies: Stay abreast of industry trends and emerging technologies related to satellite communication networks. Evaluate and recommend new technologies and methodologies to enhance network efficiency and performance. ✅Documentation: Maintain comprehensive documentation for network designs, configurations, and procedures. Provide training and knowledge transfer to junior team members.