OT Cybersecurity Consultant and Chartered Engineer
Request a quote with no obligation
I am a Principal OT Cybersecurity Consultant and Chartered Engineer (CEng) with over two decades of experience in the design, securing, and delivery of robust OT and ICS architectures for mission-critical facilities across Europe. My work currently focuses on protecting the systems that run hyperscale data centres, pharmaceutical manufacturing, and healthcare environments, with deep expertise in IEC 62443 and secure-by-design engineering.
I specialize in OT cybersecurity architecture, risk assessment, secure network design, and hardening of BMS, EPMS, PLC, and ICS environments. My background combines hands-on engineering with principal-level leadership; this enables me to translate complex cybersecurity requirements into practical, high-reliability solutions that significantly reduce operational risk.
During my career, I have led several major OT security programmes that include designing the automation network of the National Children's Hospital after the HSE ransomware attack and developing hardened, next-generation, IEC 62443-aligned architectures for direct-to-chip liquid-cooling data centres. My approach brings together rigorous standards, threat-informed defence, and clear communication with all relevant stakeholders, from design teams to executive leadership.
Beyond consulting, I have authored several best-selling books in Building Management Systems, including titles that reached #1 in Amazon's Science & Technology category. I am passionate about driving cybersecurity maturity in the built environment and supporting organisations in securing the systems that make modern infrastructure work.
I am a Chartered Engineer and Principal OT Cybersecurity Consultant with 24 years of experience in delivering secure, resilient, and standards-aligned OT, BMS, EPMS, PLC, and ICS architectures within mission-critical environments, such as hyper-scale data centres, pharmaceutical facilities, and healthcare. My expertise spans IEC 62443-based secure design, OT network segmentation, protocol hardening, secure remote access, and the implementation of defence-in-depth strategies across complex operational technology environments.
My career has covered leading OT cybersecurity designs for advanced liquid-cooled data centres across Europe, developing hardened BMS/EPMS architectures that integrate risk assessments, MITRE ATT&CK® for ICS, and best-practice security controls. These have included delivery of secure OT network designs and regulatory compliance assurance for major pharmaceutical clients and playing a key role in global ICS/BMS modernisation projects at Meta, including the migration to Schneider M580 PLC platforms and secure OPC UA architectures.
I have led significant remediation programmes, including the redesign of the National Children's Hospital automation network following a ransomware attack, delivering a fully segmented, IEC 62443-compliant architecture. My early career in controls engineering, spanning programming, commissioning, troubleshooting, and integration across multiple BMS platforms, gives solid technical underpinning and deep insight into OT protocols, network behaviour, and Level 0-2 device interactions.
I bring extensive experience in the design of secure, resilient OT systems; the production of high-quality technical documentation; the coordination of multidisciplinary teams; and cybersecurity improvements that materially reduce operational risk. I have experience in delivering secure-by-design architectures from concept through commissioning, ensuring robust protection and long-term maintainability for critical OT environments.
