Principal IT/OT and Cyber security Engineer

Job Profile & Description:

Mott MacDonald is a global engineering, management, and development consultancy committed to delivering impactful work that shapes the future.

We are a team of over 20,000 experts working across the world in more than 50 countries.
We are proud to be part of an ever-changing global industry, delivering transformative work that’s defining our future. It’s our people who power that performance. As an employee-owned business, we invest in creating a space for everyone to feel safe and valued and empowered with the right tools and support.

Whether you want to pursue excellence in your specialism or broaden your experience with flexible roles across our business, you’ll be connected to a community of global experts championing you to be your best. Join us and shape your story with Mott MacDonald, where everyone has the opportunity to be brilliant.

About the role:

The Principal IT/OT & Cybersecurity Engineer will lead the design, implementation, and assurance of secure IT and Operational Technology (OT) systems. This role is critical to ensuring cybersecurity compliance, system integration, and uninterrupted operations. The position requires strong expertise in infrastructure security, industrial control systems (ICS), and coordination with multi-disciplinary construction and MEP teams.

Key responsibilities and duties are listed, but not limited to, the below:

Cybersecurity Strategy & Compliance

• Develop and implement IT/OT cybersecurity strategy aligned with RTA, UAE NESA, and international standards (e.g., ISO 27001, IEC 62443).
• Conduct risk assessments, threat modelling, and security audits for construction and operational environments.
• Ensure all systems meet compliance requirements for critical infrastructure and public transport systems.

IT/OT Systems Design & Integration

• Oversee the design, installation, and integration of IT and OT systems, including:
• SCADA/BMS systems
• Access control & CCTV
• Network and communication systems
• Ensure secure integration between building systems (MEP, curtain wall systems, utilities) and metro operational systems.
• Work closely with contractors and vendors to ensure cybersecurity-by-design principles.

Operational Environment Security

• Implement cybersecurity controls for a live metro station environment minimizing disruption to ongoing operations.
• Develop procedures for secure construction activities near critical infrastructure.
• Monitor network and OT systems for vulnerabilities, threats, and incidents.

Risk Management & Incident Response

• Identify and mitigate risks related to IT/OT systems during demolition and construction phases.
• Lead incident response planning and execution in case of cybersecurity events.
• Conduct penetration testing, vulnerability assessments, and remediation activities.

Stakeholder Coordination

• Liaise with RTA authorities, project consultants, contractors, and system integrators.
• Provide technical guidance to project teams on cybersecurity standards and best practices.
• Coordinate with MEP, civil, and infrastructure teams to ensure secure system installation.

Documentation & Reporting

• Prepare cybersecurity plans, policies, and procedures.
• Maintain documentation for system designs, risk assessments, and compliance reporting.
• Provide regular updates to senior management on cybersecurity posture.

• Support continuous improvement and digital ways of working, sharing knowledge and lessons learned.
• Demonstrate safe, ethical and inclusive behaviours aligned to Mott MacDonald values.

Your benefits and rewards:

Our benefits vary by country and are subject to eligibility and local policy:

• Rewards and bonuses: we are owned by our people (no external investors) and through our employee ownership model success is shared through annual bonus opportunities and longer-term participation as your career grows (subject to local plan, eligibility and business performance)
• Medical insurance and life insurance as per local plan (standard and enhanced coverage may vary by country and policy).
• Annual leave in line with local policy (competitive within the market).
• Maternity leave above and beyond local provisions and paternity leave provisions where applicable
• Professional membership/ institution subscription support
• Learning and career development through project variety, technical networks and structured development opportunities.
• An inclusive culture: we’re committed to equality, diversity and inclusion, and creating a workplace where everyone feels valued and supported.