OT Patching Specialist

Overview

About Us

Founded in 1990, LS Power is a premier development, investment, and operating company focused on the North American power and energy infrastructure sector, with leading platforms across generation, transmission and energy expansion solutions. Since inception, LS Power has developed or acquired 50,000 MW of power generation, including utility-scale solar, wind, hydro, battery energy storage, and natural gas-fired facilities. Through its transmission business, LS Power Grid, the company built and operates 780+ miles of high-voltage transmission and 7 transmission utilities and has another 375+ miles currently in construction or development. LS Power actively invests in and scales businesses that are meeting the growing needs of the energy expansion, including electric vehicle charging, demand response, microgrids, renewable fuels and waste-to-energy platforms. Over the years, LS Power has raised more than $76 billion in debt and equity capital to support North American infrastructure.

Our Purpose, Mission, & Values

Our Purpose is to solve complex energy problems that improve the world.

Our Mission is to make lives better by developing a cleaner and more reliable energy ecosystem.

Our Values are Integrity, Innovation, Teamwork, and Taking Ownership.

Our People create value and are our most valuable asset. We take our values seriously and ask candidates to think about how they can help us further enhance our culture with their specific skillsets, capabilities, and experiences.

Benefits

We provide our team with the opportunity to share their unique perspectives, solve new challenges, and continue in their career growth. We are committed to supporting employees’ happiness, healthiness, and overall well-being by providing comprehensive benefits that include 100% employer-paid premium healthcare, paid parental leave, and more.

About the Role

As the OT Patching Specialist, you will be the subject matter expert responsible for protecting LS Power’s critical infrastructure through proactive patch management. Your work will directly safeguard the reliability of the grid, ensure regulatory compliance, and reduce cybersecurity risk across LS Power’s OT environments.This role is hands-on yet strategic: you’ll own the patching lifecycle while collaborating with compliance and security teams to strengthen our OT resilience under NERC CIP requirements. While leveraging IT technologies where they intersect with OT, your primary focus will be on maintaining the security, reliability, and compliance of OT systems. By applying automation, reporting, and risk-based prioritization, you will play a vital role in sustaining the security and reliability of LS Power’s most critical infrastructure.

Responsibilities

What Will You Do

Patch Management & Execution

• Serve as the primary OT Patching Specialist for LS Power Grid environments.
• Manage the full patch lifecycle: evaluate, schedule, deploy, validate, and document results.
• Utilize IBM BigFix for patch deployment, reporting, and automation.
• Test and validate new software releases and patches for compatibility while minimizing operational impact.
• Communicate patch-related risks and vulnerabilities clearly to stakeholders across the organization.

Strategy, Compliance & Reporting

• Collaborate with compliance and cybersecurity teams to ensure patching activities support NERC CIP and vulnerability management programs.
• Identify gaps or risks in patch coverage and recommend remediation strategies.
• Generate and deliver patch and vulnerability metrics for management, compliance staff, and auditors.
• Support audit readiness by maintaining accurate documentation and providing patch evidence.
• Participate in regulatory reporting activities for RTO/ISO, regional reliability entities, NERC, and FERC as required.

System Maintenance & Automation

• Leverage automation and scripted processes (PowerShell, Python, or equivalent) to reduce manual effort and improve consistency.
• Perform routine system monitoring, review logs, and verify the integrity of patched systems.
• Provide Level 2 and 3 technical support for patch-related incidents and assist with system recovery.
• Research and recommend innovative solutions to improve patching efficiency and reduce risk.

Qualifications

We Want You on Our Team Because You Have…

• Bachelor of Science in Computer Science, Information Systems, Mathematics, Engineering, or a related field; in lieu of degree, 8+ years of directly applicable IT/OT experience.
• 2+ years of hands-on experience using IBM BigFix for enterprise patching operations.
• Experience patching both Windows and Linux servers in enterprise environments.
• Strong knowledge of vulnerability management principles and patch management best practices.
• Experience generating patch/vulnerability reports, assessing risks, and recommending remediation strategies for both technical and non-technical audiences.
• Proficiency with Microsoft Office and SharePoint for documentation and collaboration.
• Excellent written and verbal communication skills with the ability to communicate across all organizational levels.
• Self-motivation, discipline, and strong organizational and critical-thinking skills.
• 5+ years of hands-on administration experience with security and patch management tools such as Nessus, Tripwire Enterprise, IBM BigFix, and/or Change Management solutions.
• 5+ years of experience performing security operations functions including maintenance, monitoring, and maturity of enterprise cybersecurity tools and programs.
• 5+ years of demonstrated experience with scripting and automation technologies including PowerShell, Python, Unix Shell Scripts, Java, C, or C++.
• Active security certification required: CompTIA Security+, CISSP, CISA, or GIAC equivalent.

Ideally, You Also Have…

• Bachelor’s degree in computer science, engineering, or equivalent work experience.
• Experience supporting NERC CIP compliance in the electric utility industry.
• Familiarity with Energy Management Systems (EMS), SCADA, or other industrial control systems.
• Experience with tools such as Tripwire Enterprise, Nessus, Splunk, or ChangeGear.
• Scripting and automation skills using Python, PowerShell, or equivalent technologies.
• Advanced certifications such as Microsoft MCSA/MCSE, GIAC, ISC2, or CompTIA Security+.
• Knowledge of electric utility operations and regulatory compliance frameworks.
• Previous experience with implementation and maintenance of security and compliance solutions.

What Success Looks Like

• Within 3 Months: You’ll have familiarized yourself with LS Power’s OT environment, taken ownership of the patch management schedule using BigFix, and established relationships with key stakeholders.
• Within 6 Months: You’ll be independently managing the full patch lifecycle, identifying areas for process improvement, and using automation to streamline reporting and deployment processes.
• Within 12 Months: You’ll be the recognized subject matter expert for OT patching, measurably strengthening our security posture, and confidently supporting audits with comprehensive evidence and metrics.

What Will You Do Patch Management & Execution - Serve as the primary OT Patching Specialist for LS Power Grid environments. - Manage the full patch lifecycle: evaluate, schedule, deploy, validate, and document results. - Utilize IBM BigFix for patch deployment, reporting, and automation. - Test and validate new software releases and patches for compatibility while minimizing operational impact. - Communicate patch-related risks and vulnerabilities clearly to stakeholders across the organization. Strategy, Compliance & Reporting - Collaborate with compliance and cybersecurity teams to ensure patching activities support NERC CIP and vulnerability management programs. - Identify gaps or risks in patch coverage and recommend remediation strategies. - Generate and deliver patch and vulnerability metrics for management, compliance staff, and auditors. - Support audit readiness by maintaining accurate documentation and providing patch evidence. - Participate in regulatory reporting activities for RTO/ISO, regional reliability entities, NERC, and FERC as required. System Maintenance & Automation - Leverage automation and scripted processes (PowerShell, Python, or equivalent) to reduce manual effort and improve consistency. - Perform routine system monitoring, review logs, and verify the integrity of patched systems. - Provide Level 2 and 3 technical support for patch-related incidents and assist with system recovery. - Research and recommend innovative solutions to improve patching efficiency and reduce risk.