ARMEXA is an industrial cybersecurity company that delivers comprehensive solutions to protect critical OT/ICS environments against cyber risk and drive resiliency. We serve clients in key industrial sectors, including oil and gas, chemicals, power, utilities, manufacturing, automotive, building automation, and healthcare.My responsibilities include• Identifying, developing, and implementing new ICS/OT security technologies• Delivering frameworks and accelerators to ensure consistent project delivery• Providing proof of concept and pilot implementations of ICS/OT security architectures• Building a laboratory environment that enables rapid testing, validation, and deployment of new ICS/OT security technologies.Armexa capabilities:Security Engineering• Security Consulting & Implementation• Network Segmentation• Architecture Design & Review• Asset Discovery• Anomaly Detection Implementation• Remote Access• Identity & Access Management• OT/ICS Cloud Integration Assessment, Threat Analysis & Planning• Architecture Assessment• Vulnerability Assessment• Gap & Readiness Assessment• Tabletop Exercises• Contingency & Response Planning• Compliance Analysis

At Accenture I work with some of the largest industrial operators in the world to build OT/ICS security programs spanning governance, policy, technical architecture, detailed design, and technical execution. We provide comprehensive methodologies to secure our clients' industrial environments through a combination of world class OT/ICS expertise, test environments, and technology partners.Sample Projects:IT/OT Security Technical Architect for an Independent Midstream Company Provide technical leadership, guidance, and implementation activities of the security infrastructure for a newly formed midstream oil and gas company. Major initiatives included forming the technical foundation and core security technologies to secure the IT and industrial assets of the organization to include remote access, NAC, cloud infrastructure, industrial perimeter protection, and industrial endpoint protection.OT Security Technical Lead for a Global Oilfield Services Company Architect, design, and implement network security technologies to protect the organization's industrial assets across all product service lines to include manufacturing, cementing, production enhancement, and directional drilling. The project involved complex network segmentation and protection activities without incurring any production downtime. OT Cyber Fusion Center Architect and Implementation Engineer Acted as a technical director and implementation engineer to introduce new technologies and partners into the OT Cyber Fusion Center ecosystem at Accenture. The OT Cyber Fusion Center acts as a cutting edge implementation of the most advanced capabilities in OT security.

I was involved in all aspects of securing Anadarko's industrial environment to include remote access, network security, endpoint security, authentication, and switching infrastructure. I performed design and implementation activities on greenfield capital projects to include compressor stations, offshore installations, oil handling facilities, and gas plants. I also performed work on brownfield assets to bring existing industrial facilities up to Anadarko's ICS Standards to include full network infrastructure replacement, network segmentation, and next generation firewall deployments. In addition to midstream assets, I programmed and implemented applications to automate the deployment and configuration of network and security technologies in the rapidly expanding upstream segment of the business.

My roles are split between offering Industrial IT services to companies in the Oil and Gas Upstream/Midstream sector and performing vulnerability research on industrial control system components.Recent projects involve designing and implementing the Process Control Domain networking infrastructure for all 3rd party equipment aboard the newest and largest offshore oil platform in the Gulf of Mexico, the Shell Olympus TLP. Initial network design, FAT, SAT, and commissioning of the entire PCD network was included in the scope of this project. As such, the project involved configuring all of the switch hardware to be installed on the platform, evaluating network attack mitigation techniques and incorporating them into the PCD, and commissioning the hardware before asset handoff to operations. All 3rd party communications to the DCS were configured over the PCD network using client recommended as well as novel network security practices. This project also involves utilizing different networking technologies to tunnel fieldbus data to a Remote Control Center located onshore, configuring OPC servers to ensure connectivity between 3rd party systems, and collaborating with vendors to ensure they meet the security requirements mandated by the client.

My primary role is to evaluate the security of industrial control networks and components by performing low level protocol and binary analysis of automation components.Design and implement test bed environments for building and industrial control systems, which includes programming various PLCs using IEC61131-3 standard programming languages.Compose white papers relating to Industrial Controls Systems to win new businessDirect the acquisition and asset tracking of all purchased program assets.

Involved in many aspects in the design and implementation of a central control room that provides supervisory control of Hydrogen and Air Separation Plants throughout the United States.Provided support in migrating to a Siemens PCS7 environment using a combination of web based control and OPC DA technologies.Constructed WinCC HMI graphical faceplates with alarming, trending, and control elements.Continued the implementation of a worldwide migration to a customized Pipeline and Facilities accounting system using AspenTech's IP.21 Historian.

Sustainability engineering involving performing plant safety upgrades and improving work processes in the ultra high-purity specialty chemicals environment.Designed a testing apparatus to measure moisture levels in vessels that were to be filled with extremely water reactive chemicals.Used test results to improve the cleaning and drying process of vessels while maintaining ultra high purity requirements. This involved both mechanical and controls upgrades.Standardized and upgraded facility PSVs (Pressure Safety Valves) to comply with corporate safety standards. The upgrade process required intimate knowledge of plant safety standard including Lock Out/Tag Out, Controls Interlocks/Shutdown Procedures, eMOCs, and Work Safety Permits.

Involved in all aspects of the computing environment unique to manufacturing facilities. Main responsibilities included evaluating, maintaining, and upgrading IT plant security as well as researching new methods to securely operate facilities remotely.