08/24/2026 updated

**** ******** ****
40 % partially available

Freelance ICS/OT Cybersecurity Engineer & Consultant

Haacht, Belgium
Only remote
MSc Industrial Sciences - Electronics-ICT (Cum Laude), KU Leuven, Campus De Nayer, Belgium
Haacht, Belgium
Only remote
MSc Industrial Sciences - Electronics-ICT (Cum Laude), KU Leuven, Campus De Nayer, Belgium

Profile attachments

MathiasDeSmedt_CV_2026.pdf

About me

OT/ICS Cybersecurity Engineer with strong industrial automation background. IEC 62443 certified. Experienced in risk assessments, OT security architecture, secure remote access, EDR, patching, backup, asset discovery, monitoring and SIEM.

NIS 2ProxmoxActive DirectoryAntivirus SoftwaresDisaster RecoveryDomain Name System (DNS) ServersGovernance Risk Management and ComplianceNetwork SecurityNetwork ServiceBackup and RestoreIEC 62443Patch ManagementFortinetWindows ServicesWsusCiscoVMware
OT/ICS Cybersecurity Engineer with a strong background in industrial automation, process control, infrastructure and cybersecurity. Experienced in critical environments including infrastructure, chemical, pharmaceutical and manufacturing industries.

My experience covers the complete OT cybersecurity lifecycle, including risk assessment, architecture, technical advisory, solution evaluation, implementation, operation, maintenance and continuous improvement.

Currently working as a Cybersecurity Engineer on the Oosterweel infrastructure project, with responsibilities including OT cybersecurity risk assessments, technical security advice and the evaluation, implementation and operation of security technologies across multiple layers of a defense-in-depth architecture.

Key skills and experience:
• OT/ICS cybersecurity risk assessments
• IEC 62443 cybersecurity concepts and lifecycle
• Cybersecurity architecture and defense-in-depth
• Purdue Model network architecture and segmentation
• OT network design and implementation
• Routing, switching and industrial networking
• Firewalls and network security
• Secure Remote Access
• Managed/Secure File Transfer
• Endpoint Detection & Response (EDR)
• Malware protection and application allowlisting
• Patch Management
• Backup & Recovery
• Automated Asset Inventory & Discovery
• System Health and Infrastructure Monitoring
• SIEM and security monitoring
• OT asset and vulnerability management
• Security solution evaluation and technical requirements
• Cybersecurity documentation and operational procedures
• Cybersecurity Management Systems (CSMS)
• Security governance and continuous improvement
• IEC 62443, ISO 27000/27001 and NIST/CyFun principles
• NIS2-related OT cybersecurity and compliance activities

At INEOS, I contributed to the development and implementation of a Cybersecurity Management System for major industrial manufacturing sites, covering technical and organizational security measures, risk management and continuous improvement.

My previous engineering background includes process automation, control systems and online DCS migrations for Honeywell and Emerson. This gives me a strong understanding of the operational constraints that need to be considered when implementing cybersecurity in production environments.

Technical experience also includes Honeywell Experion PKS, Emerson DeltaV, VMware vSphere, Windows Server, Cisco networking and OSIsoft PI.

Education & certifications:
• Master’s degree in Electronics-ICT, cum laude
• IEC 62443 cybersecurity training/certification
• ISO 27000/27001 certification/training
• Cisco CCNA training
• VMware vSphere
• Windows Server
• OSIsoft PI

My focus is on practical OT cybersecurity: translating security requirements and risk assessments into solutions that are secure, maintainable, resilient and realistic for operational environments.

Experience

Professional experience10+ years
Freelancer since2025

Languages

GermanBasic knowledgeEnglishFluentFrenchGoodDutchNative speaker

Project history

OT/ICS Cybersecurity Engineer & Consultant

Equans Digital / Ocotech (Independent Contractor)
Acting as OT security architect, advisor, and implementer on the Oosterweel Link, one of Belgium's most critical public infrastructure projects. Translating NIS2 and IEC 62443 requirements into concrete technical security designs for public transportation OT systems. Leading risk assessments, threat modelling, and zone & conduit analysis. Designing defence-in-depth security architectures and establishing continuous monitoring, anomaly detection, and incident response procedures.

OT/ICS Cybersecurity Engineer

Ineos Manufacturing Belgium
Architected and maintained a comprehensive CSMS based on IEC 62443 and NIST CSF across three production sites (Lillo, Geel, Neder-Over-Heembeek), driving full NIS2 compliance for critical chemical manufacturing infrastructure. Secured Process Control Networks, SCADA/DCS environments, and deployed a multi-layered OT security stack. Led risk assessments, gap analyses, and defined NIS2-compatible policies and procedures.

Senior Field Service Engineer

Honeywell Process Solutions
Delivered service and migration projects for Experion PKS systems (domestic and international) for major chemical and energy clients including Ineos, Total, Exmar, Vynova, and Yara. Provided pre-sales engineering support, technical scoping, and commissioning for complex DCS migration programmes. Served as senior escalation point for field issues.

Service Engineer

Emerson Automation Solutions
Maintained and migrated DeltaV DCS systems for life-science and specialty-chemical clients including GlaxoSmithKline, PolyPeptide, and Omnichem. Executed full project lifecycle activities: FAT, commissioning, system validation, and post-go-live support in GMP-regulated environments.

Field Service Engineer

Honeywell Process Solutions
Maintained and migrated Experion PKS process automation solutions for Ineos, Total, BASF, and Exmar. Participated in domestic and international migration projects, building broad exposure to multi-site, multi-vendor OT environments.

Certificates

IEC62443

ISA/IEC

2025

ISO27000

Allanta

2022


Contact form

Log in to get in touch

You need to be logged in to use the contact form.

Sign upLog in