Operational Technology (OT) security practitioner focused on industrial control system (ICS) integrity, ISA/IEC 62443 compliance, and cyber-physical risk governance across Purdue Model layers L0–L3.
All active technical evidence, field diagnostics, and lab-validated PoCs are consolidated in the primary portfolio repository:
Repository Overview: Technical artifacts produced from hands-on work inside active automated industrial environments, documented under operator-level access constraints without prior tooling or administrative credentials.
- Scope: Automotive robotic painting cell (6DOF Yaskawa arms, Siemens S7 / Beckhoff PLCs).
-
Core Technical Issue: Metrological 46.1% inaccuracy rate caused by optical viewport degradation (Mohs hardness conflict:
$\text{Al}_2\text{O}_3$ abrasive vs. borosilicate glass) leading to an undocumented third-party PLC logic bypass (Dark Data state). - Governance Alignment: ISA/IEC 62443-3-3 (FR 3 System Integrity, FR 2 Use Control) and NIST SP 800-82r3.
-
Remediation: Chemo-mechanical Cerium Oxide (
$\text{CeO}_2$ ) polishing SOP and PLC bypass purge, avoiding hardware replacement.
- Scope: Black-box vulnerability mapping across Top Coat surface treatment sub-stations.
- Core Technical Issue: 13 critical vulnerabilities mapped from operator-level privilege, including exposed physical I/O, EOL operating systems, HMI kiosk breakout, flat IT/OT topology, and open-loop PLC routines.
- Lab Validation: Defense-in-Depth architecture with
nftablestransport-layer filtering (S7Comm port 102/tcp isolation) validated via Wireshark on Debian Linux.
- Frameworks & Standards: ISA/IEC 62443 (-3-2, -3-3, -4-1, -4-2), NIST SP 800-82r3, Purdue Model, ONS RO-CB.BR.01
- Hardware & Systems: Siemens SIMATIC S7-300/1500, Beckhoff TwinCAT, Yaskawa Robotics, Industrial HMIs, IDMZ Firewalls
- Protocols & Analysis: S7Comm, PROFINET, Modbus TCP, IEC 60870-5-104, Wireshark, TShark, Scapy, Python 3, Debian Linux
Contact & Evidence Requests: Full technical dossiers (16-page reports, PCAP traces, and system log captures) are available upon request for verified professional contacts.