You will help ensure that these systems remain secure, safe, resilient, available, and maintainable throughout their lifecycle. This is an opportunity to contribute to critical transportation infrastructure where sound engineering decisions have a direct impact on service continuity, operational performance, and passenger confidence.
You will enjoy having these responsibilities
IT/OT Engineering and Integration
Design cybersecured, resilient IT/OT architectures for railway operational environments.
Develop network diagrams, system architectures, data-flow diagrams, interface specifications, IP addressing plans, and firewall communication matrices.
Integrate railway applications with servers, networks, storage, virtualisation, identity services, monitoring platforms, and cybersecurity solutions.
Support systems such as
Operational and backup control centres
SCADA and station management systems
Signalling and train-control interfaces
Passenger information and public-address systems
CCTV, access control, and physical-security platforms
Automatic fare collection and ticketing systems
Depot and maintenance-management systems
Railway telecommunications and radio networks
On-board and train-to-ground interfaces
Review supplier designs and ensure technical solutions meet operational, cybersecurity, availability, and maintainability requirements.
Networks and Infrastructure
Configure, administer, and troubleshoot routers, switches, firewalls, VPN gateways, servers, storage, and virtualisation platforms.
Implement secure network segmentation between enterprise IT, operational systems, safety-critical environments, suppliers, and passenger-facing services.
Establish demilitarised zones, secure jump hosts, access-control lists, role-based access, and controlled remote-maintenance solutions.
Support Windows and Linux platforms, directory services, certificate services, backups, monitoring systems, and centralised logging.
Engineer solutions with appropriate redundancy, fault tolerance, disaster recovery, and failover capabilities.
OT Cybersecurity
Conduct or support cybersecurity threat, vulnerability, and risk assessments for railway systems.
Identify critical assets, trust boundaries, system dependencies, potential attack paths, and operational or safety consequences.
Translate risk assessments into practical and verifiable security requirements.
Apply defence-in-depth and zones-and-conduits principles to railway IT/OT architectures.
Develop and maintain secure configuration and system-hardening standards.
Implement and improve
Least-privilege access
Multifactor authentication
Privileged-access management
Secure vendor remote access
Network security monitoring
Endpoint protection and application allow-listing
Vulnerability and patch management
Removable-media controls
Security logging and alerting
Develop compensating controls where conventional IT security measures cannot safely or operationally be applied to legacy OT systems.
Support incident response, recovery exercises, forensic readiness, and post-incident reviews.
Testing, Commissioning, and Operations
Help prepare Factory Acceptance Tests, Site Acceptance Tests, System Integration Tests, cybersecurity tests, and operational readiness assessments.
Verify system hardening, firewall rules, user access, logging, backups, system recovery, resilience, and network segregation.
Support installation and commissioning in laboratories, control centres, stations, depots, trackside locations, and equipment rooms.
Investigate incidents using system logs, packet captures, monitoring tools, alarms, and root-cause analysis techniques.
Provide Level 2 or Level 3 technical support for assigned systems.
Plan upgrades, security remediation, technology refreshes, and end-of-life replacements while minimising disruption to railway operations.
Maintain accurate asset inventories, configuration baselines, test evidence, operating procedures, and technical records.
Prepare change requests, impact assessments, implementation plans, rollback procedures, and validation reports.
You have
Qualifications and Experience
Bachelor’s degree or equivalent qualification in Computer Engineering, Computer Science, Information Technology, Electrical or Electronic Engineering, Telecommunications, Control and Automation, Systems Engineering, Railway Engineering, Cybersecurity, or a related discipline.
Typically five or more years of relevant professional experience in railway transportation, critical infrastructure, industrial automation, utilities, aviation, defence, or another high-availability environment.
Practical experience in IT/OT integration, network engineering, infrastructure engineering, system integration, cybersecurity, or operational support.
Experience working with suppliers, system integrators, internal engineering teams, and operational stakeholders.
Experience producing clear, auditable engineering documentation.
Familiarity with formal change, configuration, incident, problem, and risk-management processes.
Railway or public-transport experience is strongly preferred.
Technical Knowledge
You should have strong knowledge in several of the following areas
TCP/IP, VLANs, switching, routing, multicast, VPNs, and network segmentation
Enterprise or industrial firewalls and secure remote-access solutions
Windows Server and Linux administration
Active Directory, LDAP, RADIUS, or equivalent identity technologies
VMware, Hyper-V, or comparable virtualisation platforms
Storage, backup, restoration, and disaster recovery
Public key infrastructure, certificates, and encryption
Centralised logging, infrastructure monitoring, and network management
Industrial control systems, SCADA, human-machine interfaces, and engineering workstations
OT vulnerability management, secure configuration, and compensating controls
Packet capture, event correlation, and systems troubleshooting
High-availability and geographically resilient system architectures
Knowledge of railway systems—such as signalling, CBTC, ETCS/ERTMS, station systems, traction-power SCADA, telecommunications, rolling stock, or operational control centres—would be an advantage.
Standards and Frameworks
Working knowledge of one or more of the following is highly desirable
CLC/TS 50701 – Railway applications cybersecurity
IEC 62443 series – Industrial automation and control-system security
EN 50126 / IEC 62278 – Railway RAMS lifecycle
EN 50128 / IEC 62279 – Railway control and protection software
EN 50129 / IEC 62425 – Safety-related signalling systems
EN 50159 – Safety-related railway communications
ISO/IEC 27001 and ISO/IEC 27002
NIST Cybersecurity Framework and NIST SP 800-82
CIS Controls and CIS Benchmarks
Applicable national cybersecurity, critical-infrastructure, and data-protection requirements
Preferred Certifications
One or more of the following certifications would be advantageous
ISA/IEC 62443 Cybersecurity Certificate Program
Global Industrial Cyber Security Professional – GICSP
Certified Information Systems Security Professional – CISSP
Certified Information Security Manager – CISM
Certified in Risk and Information Systems Control – CRISC
GIAC Response and Industrial Defense – GRID
GIAC Critical Infrastructure Protection – GCIP
Cisco CCNA, CCNP Enterprise, or CCNP Security
Relevant Fortinet, Palo Alto Networks, or equivalent security certification
Microsoft, VMware, Red Hat, or Linux Foundation certification
TÜV Functional Safety or railway RAMS qualification
CLC/TS 50701, EN 50126, EN 50128, or EN 50129 training
Certified Systems Engineering Professional – CSEP
Relevant railway cybersecurity training typically combines IEC 62443 and TS 50701 with asset identification, risk assessment, segmentation, hardening, incident response, and lifecycle governance.
Personal Competencies
Strong analytical and structured troubleshooting skills
Sound engineering judgement in safety- and availability-sensitive environments
Ability to balance cybersecurity, operational continuity, maintainability, performance, and cost
Clear written and verbal communication
Ability to explain technical risks to both technical and non-technical stakeholders
Confidence in reviewing supplier solutions and constructively challenging technical assumptions
Strong collaboration across IT, OT, engineering, safety, cybersecurity, operations, and maintenance teams
Commitment to accurate documentation, knowledge sharing, and continuous improvement
Our Talent Acquisition Team is looking forward to hearing from you
We look forward to receiving your application in just a few clicks via our career portal.
For further information about Hitachi Rail as an employer visit us on www.hitachirail.com/careers
About us
Our motivation is the mobility turnaround. To achieve this, our teams find innovative products and solutions that ensure the operation and reliability of the entire rail network and increase capacities on the rails.
Our projects are diverse. To make our teams even stronger, we are looking for your support. In return, we offer you an attractive overall package with the following benefits:
Stronger together: Networking through internal networks and working in international teams
Our drive: Together, we are laying the foundations for the digitization of the rail around the world, to get people safely to their destinations and to their loved ones!
Attractive conditions: A secure and permanent job with a global company
Notes
Equal opportunities and self-determined participation of severely disabled persons and persons of equal status as well as respectful cooperation are firmly anchored principles within Hitachi Rail and its subsidiaries. We also aim to offer all our equal opportunities to start a career and to receive training and further education in our company. We consciously promote diversity and togetherness in our teams.
Thank you for your interest in Hitachi Rail. If your application is of interest, we will be in contact. Please do not hesitate to discover more about us and our latest jobs at https://www.hitachirail.com/careers.
At Hitachi Rail, there is a place for everyone. We welcome and value differences in background, age, gender, sexuality, family status, disability, race, nationality, ethnicity, religion, and world view. It is our commitment to create an inclusive environment - we are proud to be an equal opportunity employer.
We would be delighted if you would be one of our followers at https://www.linkedin.com/company/hitachirail
