ON.energy · 15 hours ago
Sr. Cybersecurity Engineer (OT & Cloud Infrastructure)
Miami, FL
Full-time
Hybrid
Senior Level
5+ years expON.energy is building the power infrastructure that makes the AI era possible. They are seeking a Sr. Cybersecurity Engineer to architect and implement technical security controls for their grid-connected energy portfolio, focusing on securing data lifecycle and cloud environments.
AnalyticsEnergyEnergy ManagementEnergy StorageRenewable EnergySoftware
Responsibilities
Secure the AWS infrastructure that hosts our energy management platforms. Implement hardening baselines and manage security groups for cloud resources
Architect a centralized and on-prem SIEM deployment to ingest logs from CloudTrail, VPC Flow Logs, and Linux servers. Configure custom decoders to detect threats across both cloud and on-prem environments
Review and secure Terraform/CloudFormation scripts. Manage security configurations (including Wazuh agents and Authentik outposts) via Ansible or similar automation tools
Secure the telemetry pipeline from the edge device (site controller) to the cloud, ensuring encryption (TLS 1.2/1.3) and proper certificate management (PKI) for edge
Architect Authentik as the central Identity Provider (IdP), enforcing MFA and SSO across cloud consoles, internal engineering tools, and Grafana dashboards
Engineer granular IAM roles for cloud resources and service accounts, ensuring that automated services have only the permissions necessary to function
Design and implement IEC 62443-aligned network architectures (Purdue Model), strictly controlling traffic between the IT, Cloud, and OT zones
Deploy Wazuh agents on industrial PCs and HMIs to perform File Integrity Monitoring (FIM) and vulnerability scanning without disrupting critical real-time processes
Analyze and secure communications (Modbus, DNP3) to ensure integrity between field assets and control centers
Qualification
Required
5–8 years of technical cybersecurity experience, with a specific blend of Cloud/Linux Engineering and OT/Industrial exposure
Wazuh: Deep experience deploying managers/agents, writing custom rules/decoders, and tuning FIM/SCA modules for low-noise environments
Authentik: Experience configuring Providers (OIDC, SAML), Outposts, and proxying legacy applications
Cloud Platforms: Proficiency with AWS (GuardDuty, IoT Core, IAM) or Azure (Defender for IoT, Entra ID)
OT Security Experience: Proven experience working with industrial control systems (ICS), SCADA, or utility/energy infrastructure
AND/OR Cloud/DevSecOps Experience: Deep expertise in securing Linux-based cloud environments and managing infrastructure via code
Hands-on: You are comfortable debugging a failed Wazuh agent on a Linux server or tracing a dropped packet in a cloud VPC
Open-Source Advocate: You prefer tailoring flexible open-source tools to fit specific architectural needs rather than relying solely on 'black box' commercial vendors
Preferred
Experience with Docker/Kubernetes security in an edge computing context
Knowledge of industrial protocols (Modbus TCP, DNP3, IEC 61850)
Certifications: GICSP, GRID, AWS Certified Security – Specialty
Benefits
Medical, dental, and vision insurance
401(k) with company match
Paid time off and company holidays
Christmas Bonus (Aguinaldo): 30 days
Major medical expenses and life insurance
Paid time off and holidays (per local policy)
Professional development and growth opportunities
Opportunity to grow with a mission-driven team shaping the future of clean energy
Company
ON.energy
Battery storage IPP. A fully-integrated energy storage developer, technology company and asset owner. using proprietary software.
51-200 employees
Funding
Current Stage
Growth StageTotal Funding
$262.6MKey Investors
Lombard Odier Investment ManagersLive Oak BankUltra Capital
2025-01-28Debt Financing· $77.6M
2024-04-25Debt Financing· $25M
2023-12-20Debt Financing· $40M
Leadership Team
Alan Cooper
Chief Executive Officer
Ricardo de Azevedo
Chief Technology Officer
Recent News
Company data provided by crunchbase