• US Citizen

• Corp-Corp

• W2-Permanent

• W2-Contract

• Contract to Hire

• Consulting/Contract

• UG :- - Not Required

• PG :- - Not Required

• No of position :- ( 1 )

• Post :- 10th Jul 2025

MTA agencies are hiring onsite consultants at various NY-area locations, who can assist the MTA Operational Technology (OT) groups in supporting new and ongoing MTA cybersecurity projects.

Background

The MTA has a vast network of transportation infrastructure spanning the New York City Metropolitan service area, southern portions of New York, Long Island, and segments of New Jersey and Connecticut. This transportation infrastructure includes a large network of underground and under-river subway, rail, and vehicular tunnels; elevated subway and rail structures; rail yards and bus depots; subway, rail, bus stations, and maintenance facilities.

Required Skills

• BGP, OSPF and Switching (Cisco)
• Network Segmentation and Isolation
• Virtualization and Infrastructure (VMware, Virtual Switches)
• Authentication, Authorization, and Accounting (AAA)
• Containment/Protection Tools for OT Environments (Forescout)
• DWDM and SONET

Knowledge of

• Physical Access Control Systems
• Video Management Systems
• Endpoint Credential Management
• Active Directory and Windows Server Administration and Hardening

MTA OT Groups

MTA agency OT groups are primarily responsible for Industrial Control Systems (ICS) that manage, monitor, and control the operations of critical infrastructure. These types of specialized technologies are required to meet safety, performance, security, reliability, and operational requirements.

To support this large operational infrastructure, the MTA employs over 80,000 people. Similar to many organizations, the MTA is challenged with securing qualified talent to fill open positions in cybersecurity, especially in the OT area. The difficulty in securing qualified talent is impeding MTA's ability to meet government cybersecurity mandates and directives as well as the timelines of many new and ongoing cybersecurity projects.

C/S Architect is based on the matrix below.

The scope/requirements are defined well in the matrix. The only thing I would add, for a C/S Architect it would be great to get people specialized in one of the following areas but also meet the other requirements:

Nozomi or other OT Network Intrusion Detection System – Specially how to fine tune and manage the systems.

Gigamon or other Network Tap/Aggregation tools

Someone who has a lot of experiences in building network documentation.

A candidate should have experience in setting up enterprise level security tools from the ground up.

Onsite Consultant Requirements;

• Must work onsite at the required location (no telework/remote).

• Must work the same schedule as required by the MTA Operating Group assigned, not to exceed 40 hours; M-F from 8:00 am through 5:00 pm EST (excludes meal time).

• Must have a clean work record; criminal and financial background checks are required. Vendor must provide certification as shown in Attachment X.

• Must be a US citizen.

• Must be physically able to lift 25 lbs. of equipment.

• Must communicate clearly with stakeholders.