Cypress Creek Renewables

Lead OT and security program managing reliability, protection, compliance, and incident response for utility-scale assets. | 8-10+ years OT/cybersecurity experience with 5+ years leadership, bachelor's degree, and strong OT security framework knowledge. | The Company The energy industry is entering one of the most significant periods of growth and transformation in its history. Meeting the nation’s growing demand for reliable electricity will require new ideas, new infrastructure, and talented people committed to building for the future. At Cypress Creek Energy, we’re meeting that challenge by developing and operating the energy infrastructure needed to power communities, support economic opportunity, and strengthen resilience. We believe our responsibility extends beyond the grid and that how we build matters just as much as what we build. That same commitment extends to our employees. We invest in professional growth, encourage collaboration across teams, and provide opportunities to take ownership, expand your expertise, and advance your career. Our culture is grounded in safety, accountability, respect, and a shared commitment to deliver results. Join us and help meet one of the most important energy challenges of our time while building a rewarding career. Overview Cypress Creek Solutions operates and maintains a geographically distributed fleet of utility-scale solar and energy storage assets and depends on its operational technology (OT) — the control, monitoring, and communications systems that run the fleet — and on securing those systems and the company’s information. As we scale, we are investing in the leadership to own operational technology and its security, and to build the program and team that will run it. This is a leadership role with ownership of both OT operations and OT and enterprise security. As Manager, OT & Security, you are the program lead for operational technology and security at Cypress Creek Solutions — accountable both for the OT systems, networks, and infrastructure that monitor and control our generation and storage fleet, and for the OT Security Program and broader cybersecurity posture that protect them. You set strategy and standards, mature the function from the ground up, lead and grow the team, own the relationship with our managed security provider, and answer reliability, availability, and security outcomes to leadership. You keep safety and availability first, balance operational and security demands, and translate risk into clear decisions. Operational technology at Cypress Creek Solutions runs the generation and storage fleet, and its security extends across the IT/OT boundary into enterprise systems. This role owns the OT environment and its security directly, partners with the technology organization on the IT side, and holds our managed security provider accountable for contracted monitoring and response. The goal is OT that is both reliable and secure — one coherent posture across the whole environment. Responsibilities Serve as the program lead and accountable owner of the OT Security Program end to end — its charter, policy, standards, and supporting plans that protect our battery storage, SCADA, and generation environments — and drive it from establishment to sustained operation. Own the strategy, architecture, and standards for the operational technology that monitors and controls the fleet — SCADA, site controllers, historians, HMIs, and field communications — with reliability and availability as first-order objectives. Steward the OT platform and infrastructure lifecycle, from selection and commissioning through maintenance, upgrade, and decommissioning, coordinating with engineering, operations, and the monitoring team. Set and execute security strategy across OT and, in coordination with the technology organization, the company’s broader IT security posture. Lead, hire, and mentor the security team — including OT security engineering and analysis — and set objectives as the function scales. Own governance, risk, and compliance: security policy, risk assessments and the risk register, exceptions, and control assurance. Oversee NERC CIP low impact obligations for in-scope assets, coordinating with NERC CIP Compliance so the security program and regulatory compliance stay aligned. Direct the managed security service provider relationship — services, SLAs, escalation, and performance — while retaining accountability for security outcomes. Serve as incident commander for significant OT and security incidents, coordinating technical response, executive communication, and post-incident improvement. Own the security budget and tooling roadmap, prioritizing investment against risk. Report security posture, key risks, and program metrics to the VP and executive leadership. Education & Experience Required 8 -10+ years in operational technology and/or cybersecurity, including 5+ years leading OT, security, or technology teams or programs. Hands-on understanding of OT systems and infrastructure — SCADA, control systems, historians, and OT networks — and what it takes to keep them reliable and available. Demonstrated ownership of a security or technology program — strategy, governance, risk, and operations — ideally including OT/ICS environments. A strong grasp of OT security frameworks (IEC 62443, NIST SP 800-82) and the NIST Cybersecurity Framework, plus the IT/OT boundary. Familiarity with NERC CIP obligations relevant to generation and storage assets (low-high impact). A proven ability to build and lead teams and to manage service providers and budgets. The judgment to weigh security against operational safety and availability, and to communicate risk credibly to executives. Bachelor’s degree in cybersecurity, engineering, computer science, information technology, or a related field — or equivalent professional experience. Embrace and live by the mission and values of Cypress Creek Energy Preferred Qualifications CISSP, CISM, GICSP, GSLC, or equivalent senior security certification. Experience running OT operations or platform teams in generation, storage, or utilities. Experience in energy, utilities, or critical infrastructure. Experience standing up or maturing an OT security program from an early stage. Experience overseeing a managed security service provider and OT-appropriate security tooling. Location: The preferred location for this role is one of our office locations: Durham, NC. Our team operates on a hybrid schedule, with in-office schedule of three days per week. Benefits: 15 days of Paid Time Off, accrual up to 20 days, 11 observed holidays. 401(k) Match Comprehensive package including medical, dental, vision and health insurance Wellness stipend, family planning stipend, and generous parental leave Tuition Reimbursement Phone Bill Reimbursement Company Swag A note to Recruiting Agencies Cypress Creek Energy Human Resources team does not accept unsolicited resumes from third party recruiters, staffing firms, or related agencies. The Human Resources team coordinates all recruiting and hiring at our company. We do not accept resumes from third-party recruiters unless authorized by the Human Resources team and if a signed agreement is in place. Any unsolicited resumes will be considered property of CCE and we are not responsible for any related fees. All communication related to recruiting partnerships should ONLY be directed to the Human Resources team. Cypress Creek Energy is an equal opportunity employer and considers all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status. We are committed to providing a workplace that is inclusive and values diversity, and we encourage candidates from all backgrounds to apply. Please be aware of recruiting scams—official communications will only come from @ccrenew.com, we will never request personal or financial information, and any suspicious activity should be reported to HR@ccrenew.com.

Design and maintain OT network segmentation, access controls, and lead incident response for critical infrastructure assets. | 5+ years OT/ICS security experience, bachelor's degree, strong control-system protocol knowledge, and familiarity with IEC 62443. | The Company The energy industry is entering one of the most significant periods of growth and transformation in its history. Meeting the nation’s growing demand for reliable electricity will require new ideas, new infrastructure, and talented people committed to building for the future. At Cypress Creek Energy, we’re meeting that challenge by developing and operating the energy infrastructure needed to power communities, support economic opportunity, and strengthen resilience. We believe our responsibility extends beyond the grid and that how we build matters just as much as what we build. That same commitment extends to our employees. We invest in professional growth, encourage collaboration across teams, and provide opportunities to take ownership, expand your expertise, and advance your career. Our culture is grounded in safety, accountability, respect, and a shared commitment to deliver results. Join us and help meet one of the most important energy challenges of our time while building a rewarding career. Overview Cypress Creek Solutions operates and maintains a geographically distributed fleet of utility-scale solar and energy storage assets. Our Operational Technology (OT) Security Program protects the control and monitoring systems that keep that fleet running safely and reliably. As we scale, we are building the internal team that will build and run it — a ground-floor opportunity to shape OT security across a growing renewables fleet. As OT Security Engineer, you are the hands-on technical owner of the Program’s protective and recovery controls across our transmission and distribution generation facilities, battery storage, and SCADA environments. You will design and implement segmentation, hardening, access controls, and recovery capability, and stand up the OT-appropriate security tooling the Program depends on. This is engineering work that lives close to live operations, so a safety-first, availability-first mindset is essential. Our 24/7 monitoring, detection, and first-line response are delivered by a managed security service provider under contract. Your role is the technical build and engineering the provider cannot do for us: standing up controls and tooling, and leading the technical response when an incident is escalated to us. You will work closely with the provider on tooling integration and incident handoff. Reports to: Manager of OT Security Responsibilities Design and maintain network segmentation across the OT fleet — security zones and conduits, the IT/OT boundary (firewalls and DMZ), and deny-by-default traffic flows; secure wireless, cellular, and field communications. Build and maintain secure configuration baselines by device type; harden OT assets and manage baseline deviations, with availability and safety taking precedence. Implement OT access controls: least-privilege, role-based access; multi-factor authentication for remote and interactive access; brokered and monitored vendor and provider remote access; and enforced credential standards. Assess the security impact of OT changes and define test and rollback plans within the change-management process. Apply cryptographic protections to OT data in transit and at rest where technically feasible and operationally appropriate. Engineer and test backups and recovery for critical OT systems and configurations; support recovery objectives and documented recovery procedures. Partition systems into zones and conduits and help determine target security levels to support OT risk assessments (aligned to IEC 62443-3-2). Select, stand up, and operate OT-appropriate security tooling — passive or low-impact where active scanning is unsafe — integrated with our managed security provider’s services. Lead technical containment, eradication, and recovery during OT security incidents. Education & Experience Required 5+ years in OT/ICS security, industrial network engineering, or control-system engineering — ideally in generation, energy storage, or utilities. Hands-on experience with network segmentation, industrial firewall and DMZ design, and secure remote access for control environments. Working familiarity with ICS/OT architectures and protocols (e.g., SCADA, PLC/RTU, battery management and power-conversion systems; Modbus, DNP3, IEC 61850) and their operational constraints. Working knowledge of IEC 62443 (particularly system requirements and zones and conduits) and NIST SP 800-82. A demonstrated OT mindset: safety and availability take precedence over confidentiality, and controls are tested before deployment. Bachelor’s degree in engineering, computer science, cybersecurity, or a related field — or equivalent hands-on experience in industrial control systems, OT/ICS networks, or control-system engineering. Embrace and live by the mission and values of Cypress Creek Energy Preferred Qualifications GICSP, GRID, or equivalent OT/ICS security certification. Experience deploying OT-specific monitoring or asset-visibility platforms (passive detection tooling). Familiarity with NERC CIP low impact obligations as they touch electronic and physical access controls. Direct experience with battery energy storage, utility-scale solar, or renewables. Location: The preferred location for this role is one of our office locations: Durham, NC. Our team operates on a hybrid schedule, with in-office schedule of three days per week. Benefits: 15 days of Paid Time Off, accrual up to 20 days, 11 observed holidays. 401(k) Match Comprehensive package including medical, dental, vision and health insurance Wellness stipend, family planning stipend, and generous parental leave Tuition Reimbursement Phone Bill Reimbursement Company Swag A note to Recruiting Agencies Cypress Creek Energy Human Resources team does not accept unsolicited resumes from third party recruiters, staffing firms, or related agencies. The Human Resources team coordinates all recruiting and hiring at our company. We do not accept resumes from third-party recruiters unless authorized by the Human Resources team and if a signed agreement is in place. Any unsolicited resumes will be considered property of CCE and we are not responsible for any related fees. All communication related to recruiting partnerships should ONLY be directed to the Human Resources team. Cypress Creek Energy is an equal opportunity employer and considers all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status. We are committed to providing a workplace that is inclusive and values diversity, and we encourage candidates from all backgrounds to apply. Please be aware of recruiting scams—official communications will only come from @ccrenew.com, we will never request personal or financial information, and any suspicious activity should be reported to HR@ccrenew.com.