Head of Cyber Security (OT/ICS/SCADA)
XCELTRA
Total des années d'expérience :19 years, 8 Mois
Combining my strong operational technology expertise with extensive cyber security knowledge, building on my solid post graduate background in both IT & OT and capitalizing on Xceltra's strong customer base in the OT sector I take the key role to establish and lead the Cyber Security line of business to accelerate the OT-IT cybersecurity initiative across the MENA region, providing tier1 consultancy, training and cybersecurity solutions.
I drive the professional consultancy services on Cyber Security of OT/ICS/SCADA and IIoT, I designed and delivered tailored cyber security training courses enabling utilities and enterprises to leverage their cyber threat preparedness level in terms of people, processes and technologies.
- Design and provide state of the art specialized training courses in the fields of industrial automation and control (ICS) cyber security, OT, IIoT.
- Provide consultancies and technical support related to this field
Capabilities in Cyber Security of SCADA and Automation Systems (ICS):
• Thorough knowledge of cyber security of industrial automation and control systems. GIAC/SANS Certified GICSP Certified (Global Industrial Cyber Security Professional).
• Security of controllers (PLCs, RTUs. IEDs, PMU, BCU, BPU) and DCS, SIS, BMS/BAS systems
• Security of Smart field devices (embedded systems RTOS for smart sensors and actuators)
• Security of industrial protocols (Serial field buses, Ethernet based, and TCP/IP based): Modbus, DNP3, Profinet, IEC 60870-5-*, OPC UA, IEC61850, ICCP, BACnet)
• Security of wireless technologies for SCADA and control systems (VSAT, BGAN, GSM, ISA100.a, wireless HART, Zigbee, Wi-Fi, Bluetooth)
• SCADA Master Control Center security hardening, FEP Hardening, knowledge of cyber measures of defending different Operating Systems (Windows, Linux) (WSUS, GPO, SystemV, SystemD) (Event logging: Event viewer, Syslog, Centralized logs: SIEM)
• Networks security (enforcement zones devices, conduits, segmentation)
• Assessment, Implementation, and enhancement of Secure system architecture for ICS, and Defense-in-Depth methodologies in compliance with local and international standards and regulations (ISA/IEC 62443, NERC-CIP, NIST-800)
• Preparing and auditing Industrial Cyber Security Business Continuity and Disaster Recovery plans, Risk Assessment.
• Project Management and Construction Management of a number of seven 66/11kV primary Substations and associated High Voltage networks Infrastructure
• Lusail City electrical network re-enforcement works.
• Utilizing technical background of power transmission and distribution, participated with the electrical team in developing more viable solutions to key electrical issues in Lusail, in terms of MV load re-distribution and redundant supplies
• Provide technical support across the project. (key achievements realized, through challenging contractors claims related to Substation Control System (SCS) and SCADA NCC integration, resulting in significant savings for the client.
• Developed and presented to Kahramaa, the Lusail City’s view of the Smart Grid implementation, with emphasis on applying distribution automation on Lusail project.
• Continuous technical support to Parsons Design core team in Lusail for Electrical and Smart City issues
Core Engineering Team:
• Reviewed Designs submissions of Electrical systems, Telecom, Instrumentation & control (ICA)
(SCADA/PLC, BMS), and ELV for different utilities city wide (Electrical substations, storm, sewage and potable water pumping stations, district metering,
automatic vacuum waste (PWC), Smart Car Park Management systems, district metering,
Tunnels and ITS for the different construction packages throughout the city. as well as PA/GA,
CCTV, ACS, FAS for different zones in Lusail.
• Participated in Tender evaluation of Electric design works
• Participated in Tender evaluation of SCADA, Instrumentation, Telecom, and ELV systems
• Developed and Issued an Automation Guide titled: ”Utilization of Controllers for Remote End
Page 4 of 8
Field Devices” for the benefit of the Client to help assessing different approaches of utilizing PLCs
vs Remote I/Os for Pneumatic Waste Collection system and other control systems in Lusail City
• Performed Load assessment verification for a number of Lusail project buildings
• Took part as the key design reviewer from Parsons for Electrical, Instrumentation, ELV, and
Telecom of CP7B (one of the most comprehensive and challenging multidisciplinary construction
packages in Lusail) where extraordinary experience of design management, coordination and
value engineering was developed.
• Provided Technical support for Smart City team in terms of the following:
▪ Prepared Scope of Work for ICS Cyber Security of control systems across the city in compliance to QCERT ICS Security standard.
▪ Participated in studies conducted for City wide SCADA integration of different systems
to the proposed new Lusail Command and Control Center.
▪ Took part in Smart metering integration for power, gas and water
▪ Successfully performed studies to the Client to evaluate impact of migration from QCS
2010 TO QCS 2014 for Instrumentation Control and Automation
outsourced for Saudi Electricity Company (National Grid SA), Riyadh, Saudi Arabia.
outsourced as part of a professional manpower contract to work for National Grid SA, a subsidiary of the Saudi Electricity Company(SEC), as follows:
POSITION: Project Engineer- Electrical: Substation Automation System (SAS) at Standards & Specifications Department, Protection & Substation Automation Division.
Responsibilities:
• Developed, reviewed and updated the standards and technical specifications of Substation Automation for National Grid SA. (contributed in deployment of PRP based IEC61850 SAS),
• Contributed in enhancing cyber security designs of SCADA and SAS
• Reviewed Scope of Work/Project Technical specifications and testing plans for new SAS and Tele-control projects.
• Participated in Prequalification of manufacturers, contractors and consultants in SCADA and Substation Automation, to be approved to implement power grid projects in Saudi Arabia.
• Practiced evaluating SCADA and Automation providers project performance country wide.
• Gathered and analyzed the project related technical problems of SAS and SCADA country wide and performed necessary site surveys.
• Represented the Standards & Specifications Department in the country wide Steering Committee for Substation Automation design Optimization and standardization.
• Technically supported the company’s contribution towards international standardization efforts.
• Trained and mentored new Engineers.
Projects:
• Design Optimization of Substation Automation Systems
• Synchrophasor (PMU) Deployment Project
• All New EHV/HV Substation Projects country wide as follows:
Participated in review of Tele-control and SAS parts of Project Scope of Work in addition to suppliers Technical Proposals.
Reviewed and solely approved inspection and testing plans plus after FAT reports for Tele-control and SAS parts of project documents.
Attended the Factory Acceptance Tests for SAS held locally in Saudi Arabia
Key Achievement with National Grid SA:
• Developed the first unified FAT ITP standard for Substation Automation (SAS) to be released by the Saudi Electricity Company (SEC)
• Participated as a member of the country wide SEC technical steering committee for Substation Automation Design Optimization, in comprehensive review and re-design of the PRP based IEC61850 SAS that notably improved the performance against cost.
• Co-authored a technical paper on Substation Automation that successfully represented SEC in GCC-CIGRE 2013
Planned and promoted Energy Efficiency, renewable energy, Smart Grid
initiatives, and Smart metering projects, in coordination with power sector
companies and all other stakeholders.
• Reviewed and set technical codes & standards to ensure efficient regulation of
the power sector in Sudan. (Grid Code, Distribution Code, Wiring Regulations)
• Participated in Compliance Assurance Monitoring of power sector companies,
Power Purchase Agreements, Multi-tariff structuring, and conducted technical
studies.
Projects:
• National Energy Efficiency Implementation.
• Rural Solar Electrification Project.
• Time of Use two way communication meters.
Key Achievements with ERA- Sudan:
• Prepared and presented the country’s first National Energy Efficiency Implementation Plan in
front of the Arab League’s department of Energy
• Establishing member of Arab Solar Thermal Network “Shamci” under Arab League’s Dept. of
Energy, and represented Sudan in Energy Efficiency regional conferences.
• participated in setting the first versions of Technical Codes and Standards that ensure best
utilization of the power system and Quality of Service (Grid Code, Distribution Code)
Page 7 of 8
Responsibilities included:
• Designs reviews and tender evaluation for SCADA &Substation Automation systems
• Leading and coaching of teams responsible for execution of Grid Automation projects including
Substation Automation Systems: Switchgear testing and commissioning, (IED-RTU-SCADA) integration, and configuration of Automation functions in substations
Feeder Automation: (Sectionalizers, LBS, RMUs, FPI)
SCADA/EMS/DMS Control Centers
• After successful implementation, the same time performed Maintenance and up keeping of the abovementioned systems, including Telecom and emergency power supply.
• Operational tasks (upon required), load dispatching of Khartoum Network, in addition to providing necessary support for operation teams when required.
Projects:
• Khartoum Distribution network modernization & Expansion
• Ring Main Unit (RMU) Distribution Feeder Automation Project
• Khartoum Control Center Project
• National Load Dispatch Center Project
• Project for Integration of 23 new substations to grid control system
Key Achievements with NEC- Sudan:
• Played a major part in the extreme refurbishment, modernization, and expansion of the entire electrical distribution network of the capital city of Khartoum, that took place from (2002 to 2010)
• Established up to successful operation the new Khartoum City Control Center (SCADA/DMS) and integration of all substations to the system. Tasks in this project have included:
o Studying offers from different vendors, taking part in negotiations, approving of Functional Design Specification and project plans
o Performing the engineering work (system data entry, designing and creating the system displays, system configuration), equipment installation and testing
• Played a Key role in implementing the First distribution Feeder Automation (RMU Automation) to be implemented in Sudan and the entire region (2005)
• Led the team that reviewed the plans for the proposed regional and distribution control centres in the other states of Sudan
• Conducted field survey and prepared a study for Northern State Electrification Project regarding automation of the entire network
• Participated in Testing and commissioning of DCS system for power generation plants
• Programmed PLCs for different applications, ex: Siemens S7-400, where a comprehensive logic and interlocking for a FGD Plant been developed.
• Performed lectures in Substation Automation for final year students of Electrical Engineering (University of Khartoum)
(Between Sept 2008-Oct 2009 sent by corporate (NEC) to obtain post graduate degree in the UK, with full employment status maintained) Courses: (Key courses: Power Systems Operation, Distributed Control Systems DCS, Control of Electric Drives, Industrial Automation)
(B+ awarded) Part Time (Key courses: Advanced Data Communication, Computer Interfacing, Networks Engineering, Advanced Electronic Design)
.