Hardware Security and Connectivity Engineer

Entity: Technology Job Family Group: IT&S Group Job Description: Role purpose The Security and Connectivity Engineer delivers hands-on engineering, and operational support for EV charging hardware and the connectivity services used by field equipment. Working within the established strategy, requirements and governance. The postholder completes security assessments, operates cellular and hardwired connectivity, implements approved changes, troubleshoots incidents and maintains reliable technical records. We are looking for an experienced, practical engineer who independently progresses routine work within defined delivery constraints, produces sound technical evidence and recognises when senior review or formal approval is required. Key accountabilities Hardware security assessment and support Contribute to hardware security assessments for EV chargers, embedded systems, load-management systems, battery systems, payment-related field equipment and associated networking components. Gather and review supplier evidence against approved security requirements, record gaps and actions, and support verification of remediation. Contribute to threat modelling and risk assessment for new products, design changes, connectivity solutions and operational deployments. Review hardware, firmware, embedded software and communications information and raise unclear, incomplete or non-conforming evidence for senior review. Support vulnerability assessment, penetration testing and technical security testing, ensuring findings and evidence are recorded accurately. Maintain traceable assessment records, including requirements, evidence, findings, decisions, deviations, risks, actions and closure status. Support security incident investigation for field assets by collecting technical evidence, coordinating suppliers and documenting recovery or remediation activity. Apply approved requirements for secure communications, identity, authentication, encryption, access control, logging, monitoring, updates and vulnerability management. Cellular connectivity operations Assist with the operations of cellular connectivity services, including SIM estates, APNs and managed IoT connectivity platforms. Implement approved firewall, access-control-list, routing, endpoint and connectivity-policy changes and verify the resulting service behaviour. Investigate coverage, modem, session, APN, DNS, routing, reachability, roaming, latency and service-performance issues using structured troubleshooting and available evidence. Coordinate with mobile network operators, connectivity providers, hardware vendors and regional operations teams to resolve faults. Support SIM and APN migrations through preparation, representative testing, change execution, rollback readiness and post-change validation. Monitor data usage, tariffs, recurring faults and service trends and identify opportunities to improve availability and cost effectiveness. Maintain accurate SIM, APN, ACL, endpoint, configuration, contract and connected-asset records within agreed processes. Site network operations Support hardwired connectivity across EV charging sites, including site LAN, WAN, Ethernet and internet-connectivity services. Assist with troubleshooting TCP/IP, routing, switching, VLAN, NAT, DNS, DHCP, VPN, firewall, cabling and equipment issues affecting field systems. Support new-site handover, remediation, network migration, equipment replacement, upgrade and service-change activities. Coordinate fault resolution with core-network teams, managed-service partners, site teams, service providers and equipment suppliers. Create and maintain network diagrams, configuration records, asset inventories, operating procedures, test records and troubleshooting guides. Help move completed sites into the agreed support model with accurate documentation, ownership and escalation routes. Essential qualifications and experience Degree or equivalent practical experience in cyber security, network engineering, telecommunications, electrical or electronic engineering, computer science, control systems or a related discipline. Relevant professional experience in network engineering, telecommunications, infrastructure operations, IoT, operational technology, connected-product security or a related field. Practical experience operating or troubleshooting business-critical network or connected-device services. Working knowledge of TCP/IP, routing, switching, VLANs, NAT, DNS, DHCP, VPNs and firewalls. Experience implementing and validating firewall, routing, access-control or endpoint changes. Working knowledge of cellular services, including 4G/LTE, 5G, SIM lifecycle, APNs and roaming, or the ability to develop this knowledge rapidly. Experience reviewing technical evidence, recording findings and following actions through to closure. Awareness of cyber security risk assessment methodologies, threat modelling and common controls for connected hardware or operational technology. Experience working with third-party service providers, suppliers and multidisciplinary engineering teams. Ability to create clear technical documentation, network diagrams, operating procedures and test records. Demonstrated ability to organise work, progress tasks independently and escalate appropriately. Desirable knowledge and experience Knowledge of EV charging infrastructure, energy systems, distributed critical infrastructure, industrial automation or safety-related environments. Knowledge of enterprise and industrial networking technologies. Understanding of Public key infrastructure, certificate lifecycle management, secure boot, signed firmware, trusted hardware components and secure remote maintenance. Knowledge of Hardware and firmware security testing, penetration testing, packet capture, protocol analysis, forensic investigation or vulnerability management. Knowledge of recognised standards and guidance, such as IEC 62443, ISO/IEC 27001, ETSI EN 303 645, NIS2 and applicable product-security legislation. Experience in Service-management practice, architecture governance and formal management-of-change processes. Relevant professional registration or current certification in engineering, cyber security or networking. Ways of working Uses evidence and structured troubleshooting to isolate faults and reach clear technical conclusions. Records configurations, changes, test results, assessment evidence and decisions accurately. Takes responsibility for assigned issues and maintains momentum without close day-to-day direction. Works within approved requirements, designs and controls Works constructively across organisational boundaries and with external suppliers. Looks for recurring issues, inefficient processes and opportunities to improve reliability, security and supportability. Communicates uncertainty explicitly and does not present assumptions as confirmed facts. Working arrangements The role works across geographically distributed teams, markets and suppliers. Travel to offices, supplier facilities, laboratories and operational sites is not expected. Participation in planned changes or incident support outside normal working hours may occasionally be required, subject to applicable arrangements.