Led the Operational Technology (OT) infrastructure upgrade of a national power generation facility in Morocco, focusing on securing and optimizing the control systems of critical energy assets. My responsibilities included:
Assessment of existing SCADA, PLC, and HMI systems and definition of upgrade strategies
Implementation of network segmentation and secure zone architecture in alignment with the Purdue Model
Applied NIST Cybersecurity Framework and CIS Critical Security Controls to harden industrial communication pathways and reduce risk exposure
Developed risk mitigation plans and conducted threat modeling (TARA) in collaboration with OT integrators and local operators
Supported the rollout of a redundant control network, enhanced firewall protection, and remote access monitoring tools
Coordinated between local energy authorities, German technology vendors, and integration partners for procurement and commissioning
The project not only brought the plant up to international security and resilience standards (e.g., IEC 62443) but also laid the foundation for future automation and energy efficiency initiatives.