Bekzat Shamgun

• Update of NCOC OT Cybersecurity Framework to
comply with IEC62443 & Republic of Kazakhstan
requirements (governance, risk assessment with
MITRE ATT&CK, policy updates, defense-in-depth,
detect-in-depth approaches). Act as OT Cyber
Security Focal point for Offshore & Onshore
facilities.

Implemented improvements:
• Full virtualization of Offshore facility with Hyper-V +
Thin Clients.
• Role segregation on hosts containing few
roles(Historian & AIM * AT OPC Server split).
• Design&Impelementation of Intrusion Detection
System.
• OT enhancement: Windows OS patches(WSUS)
management, Antivirus(ePO Archestrator) policy,
Access Control(Physicall&Logical) policy, Firewall
Configuration, L2 and L3 switches configuration.
• Cybersecurity Line of Defense audits.
• Issue of Disaster Recovery Plan for OT.
• Implementation of Whatsup Gold of
• Proactive technical monitoring techniques
Auditor,
Responsobilities:
• Preparation of site-survey report, feasibility report,
scope of work.
• Review all design documentation including proposed
architecture, bom, workpack, schedule,
implementation strategy.
• Participate as at Site Acceptance
Tests (SAT), Factory Acceptance Tests (FAT).
• Lead Commissioning and startup activities at site.
• Support with post-startup activities(project close-out,
qa&qc, evidences provision, rlmus and etc).
• Initiate and execute Management of Change (MOC)
processes to ensure seamless integration of technical
changes.
• Implement ICS/OT Security controls in alignment with
governance requirements to safeguard operational
systems.
• Maintain comprehensive logical and physical network
drawings of ICS/OT components for clear
understanding and documentation.
• Collaborate with vendor facilities during engineering
phases, evaluating quotations, proposals, and designs
for optimal solutions.
• Ensure adherence to Purdue model by maintaining and
optimizing Level 1, 2 and Level 3 systems.
• Configure and oversee monitoring tools and execute
robust disaster recovery backup and recovery
strategies.
• Manage Operating system updates.
• Implementation best practicies as per Cybersecurity
standard IEC62443.
• Perform ICS/OT audits on quarterly basis.
• Maintain network switches(Cisco, Hirschmann) and
Firewalls Juniper & Cisco ASA & Cisco NGFW.

• Honeywell Experion PKS R4xx, R5xx
• Safety Manager
• EBR
• Lead & perform on-process migration of Experion
Servers.
• Installation of point releases of Experion PKS.
• Maintain ACE, ViewOnly servers.
• Implement Rapid redundancy for ACE servers.
• Maintain Level1, Level2, Level2.5, Level3 as per
Purdue model.
• Implementing new/modified logic. Update of IO list,
general arrangement, power&heat calcuation, patch
panel, network architecture drawings.
• Actively participated in the commissioning of the
Greenfield project called carrying out
functional tests and ensuring system validation as
system custodian.
• Demonstrated proficiency in control and safeguard
narrative tests, loop checks, black start-ups, and other
operational processes.
• Successfully complete FAT and SAT activities for
greenfield projects.

• Yokogawa Centum VP/CS300
• Prosafe-RS
• Stardom & FastTools
Responsibilities:
• Configuration of connection by Modbus RTU/TCP-IP,
OPC, Foundation Fieldbus protocols (Application
Engineering & Hardware Engineering).
• Maintain all backups, licenses, software related to
Yokogawa ICSS.
• Maintain OS patch installation, application point
release installation at customer site.
• Maintain ExaOPC configuration and connection with PI
OSIsoft.
• Implement new/modified logic by using IEC61131-3
PLC Languages(IL, LD, ST(SEBOL), FBD, SFC)
• Deliver exemplary technical and service maintenance
for Yokogawa automated process control systems,
ensuring peak equipment performance.
• Provid invaluable guidance to customer
representatives, offering insights on equipment
operation and optimizing its utilization.
• Expertly configure, programm, and engaged with
Yokogawa software products, enhancing system
functionality and efficiency.
• Executed tasks under project contracts, delivering
meticulous technical consultations and adhering to
contractual agreements.
• Conduct hands-on work at customer sites, actively
engaging in technical meetings, and providing on-site
consultations.
• Successfully install and commission automated
process control systems, guaranteeing seamless
system integration and operation.
• Analyze system failures and deviations, identifying
root causes and providing comprehensive reporting for
informed decision-making.