The OT Automation & PCN Security Engineer will design, implement, and operate automation solutions for Process Control Network (PCN/OT) environments. This role partners with platform and product teams to harden OT servers, codify infrastructure changes, integrate CI/CD workflows with ITSM processes, and maintain secure access patterns across Windows, Linux, and vSphere estates. The engineer will also contribute high quality technical documentation (e.g., design specs, architecture views, and data flows) and coordinate with stakeholders to ensure operational readiness and compliance.

Responsibilities for this position may include but are not limited to

• Build and maintain CI/CD pipelines (Azure DevOps Server) that deploy and test automation for OT/PCN workloads.

• Develop and maintain Ansible playbooks/roles for Windows and Linux server configuration, patching, and application deployment in segmented networks.

• Integrate automation workflows with ServiceNow (requests/incidents/changes), including ticketing, approvals, and status updates.

• Implement vSphere infrastructure‑as‑code practices to standardize and accelerate VM lifecycle operations.

• Administer and harden OT/PCN servers, including access provisioning and least‑privilege controls aligned with security standards.

• Produce and maintain technical documentation (Detailed Design Specifications, high‑level architectures, data‑flow diagrams) and operational runbooks.

• Collaborate closely with product owners, tech leads, and vendor partners to plan, demo, and iterate on automation outcomes in regular team ceremonies.

• Troubleshoot automation pipeline failures and environment issues across networks, servers, and integrations, driving root‑cause analysis and corrective actions.

• Champion change management and configuration management best practices for safe operations in regulated OT environments.

• Contribute to continuous improvement of observability and operational readiness (dashboards, alerts, SLOs) for automated services.

Required Qualifications

• Hands‑on experience building CI/CD pipelines in Azure DevOps Server for infrastructure and configuration automation.

• Proficiency with Ansible for Windows and Linux automation (inventory strategy, playbook design, idempotent tasks, secrets handling).

• Working knowledge of ServiceNow and ITIL processes; able to connect automation tasks to ITSM workflows (requests/incidents/changes).

• Experience operating and securing OT/PCN environments (network segmentation concepts, jump hosts, access provisioning, server hardening).

• Exposure to VMware vSphere and infrastructure‑as‑code patterns for VM provisioning and operations.

• Strong scripting ability in PowerShell and/or Python for tooling, integrations, and automation glue.

• Demonstrated ability to create and maintain technical documentation (design specs, architecture diagrams, data flows, runbooks).

• Excellent communication and cross‑team collaboration skills in a global, vendor‑partnered context.

Preferred Qualifications

• Experience in industrial/OT settings (oil & gas, utilities, manufacturing) and familiarity with ICS/SCADA considerations.

• Knowledge of security frameworks relevant to OT (e.g., ISA/IEC 62443, NIST controls) and practical implementation in PCN environments.

• Experience integrating automation telemetry with observability platforms (dashboards, metrics, alerting) to validate outcomes and SLOs.

• Familiarity with Git branching strategies, artifact repositories, and release orchestration for infra/config code.

• Background in Windows/Linux system administration in segmented networks (bastion/jump servers, proxy constraints).

• Bachelor’s degree in Computer Science, Engineering, or a related field—or equivalent practical experience.

Relocation Options:

Relocation could be considered.

International Considerations:

Expatriate assignments will not be considered.

Chevron regrets that it is unable to sponsor employment Visas or consider individuals on time-limited Visa status for this position

Default Terms and Conditions

We respect the privacy of candidates for employment. This Privacy Notice sets forth how we will use the information we obtain when you apply for a position through this career site. If you do not consent to the terms of this Privacy Notice, please do not submit information to us.

BASSC is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunities consistent with legal requirements.

Please access the Global Application Statements, select the country where you are applying for employment. By applying, you acknowledge that you have read and agree to the country specific statement.

Terms of Use