Arunkumar Subramaniyan

Client: Kuwait National Petroleum Company (KNPC) and Kuwait oil company(KOC)

Projects:

• Schneider Electric DCS cybersecurity upgrades for RMPCCR, OMCCR, GPCCR, and FTE (1–16) units.
• FUPCCR plant DCS migration from Emerson Delta to Schneider Electric DCS.

Responsibility:

• Conducted OT/ICS cybersecurity assessments for Oil & Gas facilities across FEED, engineering, FAT, SAT, commissioning, and operations.
• Reviewed project scope, OEM designs, system architectures, network diagrams, cybersecurity designs, and security configurations.
• Performed cybersecurity risk assessments for DCS, SCADA, PLC, SIS/ESD, HMI, historians, engineering workstations, and OT networks.
• Developed OT asset inventories and classified assets based on criticality, business, process, and safety impact.
• Conducted threat, vulnerability, consequence, and cybersecurity risk assessments for critical OT systems.
• Assessed risks related to remote/vendor access, wireless systems, removable media, engineering workstations, and IT/OT connectivity.
• Reviewed OT architecture and recommended network segmentation, security zones/conduits, firewalls, access controls, and monitoring.
• Performed compliance and gap assessments against IEC 62443, NIST SP 800-82, NIST CSF, and company OT security requirements.
• Developed and maintained OT cybersecurity risk registers, risk treatment plans, and mitigation strategies.
• Supported development of Cybersecurity Requirements Specifications (CSRS) and OT security requirements for projects and modifications.
• Reviewed firewall rules, communication paths, network segmentation, and defense-in-depth controls against approved architectures.
• Performed system and network hardening based on security standards and OEM recommendations.
• Supported MOC, OT cybersecurity audits, incident response, compliance assessments, FAT/SAT, commissioning, and maintenance activities.
• Coordinated with IT, OT, process control, instrumentation, electrical, process safety, operations, maintenance, and engineering teams.
• Prepared cybersecurity assessment, gap analysis, risk register, technical reports, and management presentations.

Client: Kuwait National Petroleum Company (KNPC)

• Implemented Nozomi IDS across RMPCCR and OMCCR plants and integrated it with IBM QRadar SIEM for centralised OT SOC monitoring.

Responsibility:

• Configured and monitored Nozomi Networks for continuous visibility of OT/ICS assets, network communications and industrial protocols.
• Monitored OT network traffic to detect abnormal behaviour, suspicious communication, unauthorised devices, and potential cyber threats, enhancing overall network security.
• Performed OT asset discovery, classification and inventory validation using Nozomi.
• Investigated Nozomi security alerts, vulnerabilities, anomalies and threat detections.
• Analysed OT communication relationships between assets, nodes, links and sessions to identify unusual network behaviour.
• Reviewed vulnerability information, including CVE, CVSS, and vendor-specific OT vulnerabilities, to support targeted risk-based remediation efforts.
• Tuned Nozomi alerts and analysed false positives, optimising detection accuracy for more effective threat identification.
• Integrated Nozomi security events with IBM QRadar SIEM using syslog/LEEF.
• Maintained OT cybersecurity monitoring procedures, alert-handling procedures and incident response playbooks

Client: Schneider Electric R&D Center

Projects:

• Validated and released Schneider Electric DCS Control Core System (CCS) and Control Software (CS).
• Validated Trellix ePO Antivirus compatibility with Schneider DCS CCS/CS environments.
• Performed Microsoft OS patch testing for Windows Servers and Workstations integrated with DCS.
• Validated and released DCS Quick Fixes and Maintenance Packs.
• Validated OPC UA communication with Schneider Electric FDC280 controllers.

Responsibility:

• Installed and configured DCS test environments, servers, workstations, virtualization platforms, controllers, and FBMs.
• Installed, configured Trellix ePO and endpoint security solutions, including ENS, VSE, Application Control, Change Control, DLP, and RSD.
• Managed security policies, software packages, extensions, DAT and exploit prevention content updates.
• Troubleshot Trellix agent communication issues, security incidents, and endpoint protection failures.
• Tested and validated Microsoft OS patches on DCS servers and workstations.
• Supported internal/external audits and OT cybersecurity compliance with ISA/IEC 62443, NIST SP 800-82, and NIST CSF.
• Prepared SOPs, installation verification documents, and cybersecurity-related technical documentation.
• Performed quick-fix validation and issue reproduction/testing across different I/A and FCS versions.

Client: Takreer - Abu Dhabi, BP Khazzan - Oman, Shaybah - Saudi Arabia Projects:

• Executed Yokogawa CENTUM VP project engineering, including control logic and HMI graphics development for a Carbon Black Delayed Coker (CBDC) plant.
• Performed installation and commissioning of Yokogawa CENTUM VP for a Natural Gas Condensate plant.

Responsibility:

• Configured DCS communication networks and installed software across system nodes.
• Troubleshot complex DCS hardware, software, I/O, and commissioning issues.
• Designed and configured HMI graphics for process monitoring and control.
• Performed I/O module checks, hardware signal troubleshooting, and redundancy testing.
• Reviewed P&IDs, control philosophies, Cause & Effect, logic diagrams, datasheets, vendor drawings, instrument indexes, and cable schedules.
• Participated in FAT activities, demonstrating control logic, graphics, trends, reports, and hardware loops to customers.
• Implemented customer comments and modifications following FAT.
• Developed open-loop and closed-loop control logic based on control narratives.
• Updated tag descriptions, engineering units, and I/O ranges based on approved I/O databases.

Client: ABB R&D Center Project:

• Validated & released ABB DCS 800xA v5.0 software with compatibility for Windows Server 2008 and Windows 7.

Responsibility:

• ABB 800xA Software Installation and test bed preparation as per Requirements.
• Installed and configured ABB 800xA software and prepared test beds as per requirements.
• Developed and reviewed functional test cases and performed DCS software functional/configuration testing.
• Tested alarms, events, trends, faceplates, logs, and system/process functions.
• Developed and tested control logic and applications using ABB Control Builder.

Projects:

• Maintenance of Yogokawa centum CS 3000 DCS and Field Instruments in 30MW power plants.
• Maintenance of Emerson Delta V DCS & Field Instruments in Sugar plant.

Responsibility:

• Installed, configured, and tested DCS hardware, software, controllers, alarms, and annunciators.
• Conducted SAT and supported DCS commissioning and plant startup activities.
• Maintained and troubleshot field instruments, including sensors, transmitters, and control valves.
• Performed routine instrument calibration to ensure accurate process measurement and control.
• Planned and executed preventive and corrective maintenance to minimize downtime and restore systems to normal operation.