United Kingdom
Senior OT/ICS Cybersecurity Architect with 22+ years of experience in industrial environments. 12+ years specializing in cybersecurity architecture, secure-by-design implementations, and SOC detection engineering. Proven expertise in IEC 62443, NIST SP 800-82, and advanced OT security platforms including Claroty, Nozomi, and Armis. Working knowledge of EU regulations (e.g.,NIS2, CRA). I have led, worked upon and successfully delivered global projects across Manufacturing, Energy, Oil & Gas, Power, Utilities, Automotive, Aviation, and Subsea Control Systems. My work includes OT network segmentation, governance automation, SOC detection engineering, and incident-response workflows that reduce risk and improve resilience.
● Enhanced OT SOC detection quality by reducing false positives through MITRE ATT&CK for ICS–aligned use cases, leveraging Claroty, Palo Alto, Zscaler, SentinelOne, QRadar, and enriched with Threat Intelligence (Anomali/Dragos), UEBA tuning, and SOAR playbooks. (2022) Client: Schneider Electric ● Advanced Zero Trust adoption in OT SOC by implementing Secure Remote Access (SRA)–based access controls and MITRE ATT&CK–mapped communication validation. (2023) ● Developed OT incident-response workflows with event correlation aligned to NIST SP 800‑82, strengthening detection and response capabilities. Categorized OT detections (Claroty, Palo Alto, ZScalar) into P1/P2/P3 Levels aligning escalations and communications flows with structured Incident Handling expectations consistent with emerging NIS2 governance (2024) ● Reduced governance effort by 20% through Claroty xDome customization across five global sites, leading automation in device retention rules, asset labeling, vulnerability prioritization, lifecycle management, and auto-actions. (2025) Client: CNH Industrial ● Contributed to Pre-Sales success by preparing solution proposals, RFP responses, effort estimation, and client presentations for Wipro OT Cybersecurity Services, supporting engagements with Sydney Water (Australia) and Endeavour Energy (UK).
● Designed IEC 62443 aligned network segmentation including micro segmentation of SPCS communication paths (PLC – MCS - Subsea equipment) ● Supported FAT and EFAT, cybersecurity and compliance audits, STRIDE threat modeling. ● Delivered network architecture and security design for 6+ global subsea projects: ENI Coral (Africa), Shwe (Bangladesh), ONGC 98/2 (India), Ichthys (Australia), Snohvit (Norway). ● Authored cyber-QA documents; performed hands‑on firewall/router configuration; resolved integration defects.
● Served as Point of Contact for control system components, network architecture, and cybersecurity solutions for GE power plants (Gas, Steam, HRSG, Balance of Plant, PGSC). ● Designed secure product solutions addressing cyber hardening, network segmentation, and redundancy, ensuring compliance with GE Power’s cybersecurity standards. ● Led platform discussions with end customers, ITO, sourcing, global supply chain teams, and global design leads; represented network architecture and controls hardware in Customer Kick‑Off Meetings (CKOM) and Controls Finalization Meetings (CFM). ● Oversaw controls hardware fulfilment for panels, HMIs, and plant requirements, focusing on standardization and contractual compliance. Provided plant commissioning and service support, including PAC case resolution. ● Key project contributions included Anyang (South Korea), Soyo (Zaire), Jamaican Power Services (USA), and Iernut (Romania).
Electronics Design Engineer and System integration support for Subsea Production Control System (SPCS) Led the electronic hardware design, development and transition to production of APCM Modem for Topside-Subsea Communication based on OFDM technolog It is an NPI triggered to obtain product edge over competitors. As hardware lead, transitioned concept design to production, employing Six Sigma concepts of Design for Manufacturability (DFM), Design Reviews, Root Cause Analysis, System Integration and Testing, detailed Documentation, in line with GE O&G Design Practice and NPI Toll Gate process from requirements to first successful deployment. Worked on System Level Testing and Communication Feasibility Analysis for meeting pilot project requirements that included, Topside - Subsea System Integration, communication testing with different permutations of modem frequency bands and data link components for providing a complete solution covering Multidrop and cross talk requirements. Validation of Customer Problem Statement, Concept Design, Proof of concept Testing and Preliminary Design of Line Insulation Diagnostic and Monitoring Device for SPCS. Key Achievements: Start to End design & support to Piloting APCM modem in ENI Ghana, Africa
Electronic Module Development (Embedded Hardware and Software) for Engine Control Unit (ECU) modules Viz., power supply, input stages, digital core, and output power stages working with LIN, K-Line transceivers, Current amplifier, Atmospheric pressure and Lambda sensor, Speed sensor interface ICs. Requirement analysis, Circuit design and Worst-case analysis, Simulation, Embedded software development. Preparation of design specification, application notes and test specification. Key Achievements: Induction of LIN transceiver module, atmospheric pressure sensor module into Bosch ECUs after testing with Vehicle Simulator. Corrective design changes after failure of ECUs in large numbers using outcome of Root cause analysis