CBRE is the world’s largest full-servicecommercial real estate and investment organization offering a broad range ofintegrated services, including; facilities, transaction and project management,property management, investment management, appraisal and valuation, propertyleasing, strategic consulting, property sales, mortgage services anddevelopment services.
CBRE, Global Workplace Solutions is a division ofCBRE that focuses on the designand implementation for workplace technologies across North American officeportfolios. Through our Consulting, Design, and Project Management services, webridge the gap between Real Estate & IT departments to deliver product-agnosticsolutions as the “Single Point of Contact” for all workplace scopes. We specialize in helping clients think strategically about technologyutilization and implementation within their workplace.
SmartBuilding and Operational Technology (OT) Manager willown facilities related technology delivery and readiness for all clientstakeholders. Client site/s will haveconverged networks and isolated remote networks containing all OT systems. Representative systems include, but notlimited to, Building Management Systems (BMS), Lighting Control systems, EnergyManagement Systems, IAQ sensors, Rest Room Management Systems, OccupancyDetection, Occupant Call systems, Room Scheduling Systems and other IoTdevices. The role will ensure technologyenhances the occupant experiences, influences cost savings / avoidance energysavings, and increases system reliability. The role will supervise the operationaltechnology Managed Services Provider (MSP) and it’s delivery to their assignedService Level Agreement metrics. . The MSPperforms the hands-on network and server work; you influence and define what excellencelooks like, approve it before it happens and verify it afterward. This rolewill also act as administrator of the smart building data platform and as asite subject matter expert on building data and analytics, driving theoperation toward data-led decisions on maintenance, energy and capital spend.In-depth platform training will support the right candidate’s transition intothe role.
What You'll Do:
Strategy and Governance
- Member of teamwhich owns smart building and OT strategy, roadmap and standards for the clientsite/s, leveraging best in class experience written so they scale to furthersites in the portfolio.
- Own changemanagement for OT network. Hold the permit to work (PTW) approval gate andreview every method of procedure (MOP) before approval, includingpre-deployment backup verification and a documented rollback plan.
- Comply withbreak-fix policies within the clients change management processes for immediatecorrections and escalate as required to ensure cyber security compliance withcritical vulnerably and Exposures (CVE).
- Own lifecycleplanning and access control policy for OT assets, and feed technology needsinto the capital plan.
OT Systems Management
- Own the networkarchitecture standard for the site/s, Cisco Catalyst are the primary networkingtools to include a Catalyst appliance running Identity Security Engine forendpoint security, Catalyst core switches with failover, WAN aggregation forvendor ISP circuits, Catalyst Power over Ethernet (PoE) Access switches withPalo Alto Firewalls, and Catalyst Industrial Core Switches for remotesites.
- Own the applicationvirtualization platform standard on Microsoft Hyper-V: redundant DellHypervisors running in fail over capacity across physically separated OTclosets, supporting multiple vendor and OT systems.
- Hold master assetinventory: every connected device with firmware version, owner, networklocation, warranty status and support contract.
- Keepdocumentation current and version-controlled: topology drawings, IP schedules,virtual local area network (VLAN) and access control list (ACL) records, pointlists and integration interfaces. Review MSP updates rather than acceptingthem.
- Own uptime andresilience against agreed service levels. Lead escalation on OT incidents, andaccept or reject the MSP root cause analysis on the evidence.
- Monitor criticalsystems during emergency response, and categorize events by operational impactso the site team can prioritize its response.
Data Platform, Integrationand Administration
- Act as systemadministrator for the smart building data platform. Configure end-users, assignaccounts, roles and access levels, and review them based on least privilegedaccess on a set cycle.
- Support andtroubleshoot day-to-day platform issues and anomalies, and initiate correctiveaction with site teams or third-party vendors.
- Identify gaps inplatform configuration and capability, and act as the liaison between end-usersand vendors to specify and introduce new functionality.
- Lead integration effortswith stakeholder OT systems and enterprise applications, including thecomputerized maintenance management system (CMMS), workplace systems andreporting tools.
- Work with theSaaS platform vendor to ensure adherence to the common data model in the SaaSplatform for analytic purposes.
- Enablestandards-based integration: BACnet/IP, Modbus/IP & Modbus RTU, MQTT andREST APIs.
- Work with accountleadership and business intelligence teams to define reporting and keyperformance indicator requirements, and identify the additional data sourcesneeded to support agreed metrics.
Cybersecurity and Compliance
- Own ISE policy onsite. Ensure unknown endpoints are routed to an isolated VLAN with nocommunication path to other devices and RCA for devices are documented. Maintain the known endpoint register andmonitor the demilitarized zone (DMZ) for unknown assets.
- Own the OT assetvisibility platform, such as Armis, for continuous asset discovery,vulnerability monitoring and threat detection. Triage findings, set remediationpriorities and track closure with the OT Network MSP.
- Approve and auditthe patching plan. Hold the MSP to patch service levels by commonvulnerabilities and exposures (CVE) severity, and confirm sandbox testinghappened before anything reached production.
- Ensuredeployments of patches and upgrades are completed in client developmentenvironments, where provided, prior to implementation in productionenvironments.
- Enforce system hygienewith the MSP: antivirus scanning of all media and secure file transfer beforeanything connects to the OT network. Control vendor access with named,time-bound accounts and session logging, and no shared credentials.
- Own the disasterrecovery plan and the backup regime. Testing with the MSP for by dry tests andlive testing to be documented annually. Verifyswitch and hypervisor backups land as scheduled, run the semi-annual failoverdry run and the annual full failover with redundancy testing, and document whatfailed.
- Run regular riskassessments and vulnerability reviews, and keep audit evidence current: accessreviews, patch records, backup restore tests and change logs.
- Maintaincompliance with IEC 62443 and adhere for ISO 27001 standards for OT security,and with corporate information security standards where the site falls inscope.
Building Performance, Energyand Sustainability
- Use the sitemetering and controls data to reduce energy use, carbon emissions and operatingcost.
- Run faultdetection and diagnostics program and inform the operators for improvements.Tune the rules, review alerts daily, and route confirmed faults into the CMMSas work orders with a named owner and a close-out date.
- Work with siteengineers, technicians and facility managers to triage incoming issues, andverify that remediation holds rather than closing on the first fix, identifyissues for improvement.
- Drive the site teamsfrom schedule-driven to condition-driven maintenance, using platform data toset preventive maintenance intervals and to build the capital plan.
- Implement andmonitor optimization strategies: scheduling, setpoint tuning, demand responseand equipment sequencing.
- Produce a monthlylist of energy and maintenance actions ranked by value, each with expectedsavings and payback.
- Identify andbuild the business case for improvement projects: return on investmentcalculations, budget submissions, and measurement and verification of deliveredsavings against an agreed baseline.
- Supportcertification and sustainability reporting (LEED, ENERGY STAR, WELL) with dataand analysis from building systems.
- Benchmarkperformance and run a continuous improvement program against it.
Occupant Experience andWorkplace Enablement
- Use IAQ,occupancy, restroom management and occupant call data to improve comfort,cleaning response and space performance with the client stakeholder.
- Support smartworkplace capability where deployed: booking, wayfinding and environmentalcomfort control.
- Work withworkplace and real estate teams on utilization and experience decisionsgrounded in occupant sensor building data.
- Collect occupantand stakeholder feedback and use it to prioritize the roadmap.
MSP Governance, Vendors andProjects
- Act as the singlepoint of contact for the OT MSP across all contracted service components: reactive support, hardware procurement, ad-hoc support, scheduled maintenanceand patching, and proactive assessment and planning.
- Measure andenforce the contracted service levels, typical are a a four-hour on-siteresponse and eight-hour resolution for system-down events with graded targetsbelow that. Log every breach and run the remedy conversation.
- Review andapprove MSP deliverables: monthly site visit reports, switch and hypervisorbackups, quarterly health assessments, and bi-annual capital expenditurerecommendation memos with rough order of magnitude estimates. Challengerecommendations that lack evidence.
- Verify thecontracted on-site presence delivers the proactive scope: physical and logicalhealth checks, capacity trending, vulnerability report review, switchconfiguration and DMZ maintenance, and topology updates.
- Control ad-hoctime and materials spend against the master rate card. Approve scope beforework starts and check invoices against the L1, L2 and L3 rates by hour band.
- Govern hardwareprocurement: validate pass-through pricing, confirm the markup matchescontract, and check that manufacturer warranties register in the Owner’s name.
- Manage originalequipment manufacturers, system integrators and technology providers, anddefine technical requirements and scopes of work for new projects andretrofits.
- Review controlsand network specifications against the site standard, witness commissioning,and decline handover of any system that does not comply.
- Evaluate newtechnology through proofs of concept. Scale what works, stop what does not, andsay why.
- Contribute to MSPservice reviews and re-tender with performance data rather than impressions.
AdditionalResponsibilities:
- Facilitate sitetechnology, project and vendor meetings effectively, and keep minutes andactions.
- Hold regularstatus meetings with the MSP and the site team, communicating relevantinformation.
- Resolve orescalate issues in a timely fashion.
- Ensure projectand system documents are complete, current, and stored appropriately.
- Suggest areas forimprovement in internal processes along with possible solutions.
- Comply with andhelp to enforce standard policies and procedures.
What You'll Need and IdealCandidate Profile:
Experience
- Bachelor’s degreein engineering (mechanical, electrical, controls or building services),computer science or a related field, or equivalent site experience.
- 10 or more yearsin building systems, OT, building automation or a related field, including atleast two years leading people or a technical workstream.
- Demonstratedexperience with BMS and building controls (Schneider, Siemens, JohnsonControls, Lynxspring, Honeywell or equivalent).
- Experience inbuilding systems design, commissioning, retro-commissioning, optimization andanalysis.
- Experience usingtime-series data to identify performance deficiencies and anomalies, determineroot cause, and verify that remediation worked
- Experienceadministering a software platform, including user roles and access management.
- Experienceintegrating OT systems with enterprise applications inside a segmented clientmanaged network.
- Experiencemanaging a service provider against service levels, including formal changecontrol through MOP and PTW processes.
- Track recorddelivering complex technical projects and managing vendors.
Preferred
- Master’s degreein engineering, smart buildings or a related field.
- CCNA or CCNP;GICSP or IEC 62443 for OT security; Palo Alto or equivalent firewallcredential; a controls platform certification (Tridium Niagara, KNX, Siemens,Schneider or Johnson Controls); Certified Energy Manager; LEED AP; PMP.
- Windows Serverand Hyper-V administration experience.
- Experience withan OT asset visibility or network detection and response platform such asArmis.
- Experiencedeploying, tuning and operationalizing fault detection and diagnostics softwarein occupied buildings.
- Experience withutility metering design, installation, integration and maintenance acrosselectrical, gas and water.
- Experiencedeploying or upgrading building automation and direct digital control systems.
- Experience incommercial or corporate real estate, facility operations or propertymanagement.
Skills
- Strong groundingin building systems: HVAC, lighting, security, metering and life safety.
- Knowledge of OTprotocols: BACnet, Modbus, SNMP, and MQTT.
- Hands-onknowledge of enterprise switching in an OT context: VLANs, ACLs, segmentation,routing fundamentals and firewall policy,
- Working ITnetworking knowledge: TCP/IP, DNS, DHCP and firewall administration.
- Understanding ofOT security practice: segmentation, identity-based access control, patchmanagement and incident response.
- Experience withdata platforms and business intelligence tools.
- Ability to readand interpret control drawings, schematics, one-line diagrams and buildingplans.
- Strong empiricalanalysis: processes and understands unfamiliar data quickly whentroubleshooting.
- Producesclient-ready reports, materials and visualizations.
- Communicatesclearly with audiences from technicians to senior leadership, and adjusts toeach.
- Learns a newsoftware platform quickly and to a working depth.
- Worksautonomously and delivers results without close supervision.
- Persistent: keepsworking a problem until the system works properly, including when the obstacleis organizational rather than technical.
- Explainstechnical risk to people who do not work in technology, and holds a positionwhen challenged by a project team or a vendor.
- Manages contractsand vendors on evidence, and makes decisions from data.
Manages pressure, critical response, vendorsand supporting personnel with professionalism.
Key PerformanceIndicators:
- Energy use persquare foot, year-over-year reduction against target.
- Unplanneddowntime of critical building systems.
- OT securityincidents, and mean time to remediate confirmed vulnerability findings byseverity.
- MSP service levelperformance: percentage of incidents meeting response and resolution targets,reported monthly.
- Percentage ofcorrective work orders generated by analytics rather than occupant complaints.
- Platformadoption: active users by site team role, and percentage of confirmed faultsreviewed within target.
- Verified savingsfrom improvement projects, measured against an agreed baseline.
- Percentage ofconnected assets with current firmware and a verified backup.
- Changecompliance: percentage of configuration changes made under an approved PTW witha complete MOP. Target 100%.
- Occupantsatisfaction on comfort and environment, where measured.
- Smart buildingprojects delivered on time and on budget.
Physical Demands/WorkingConditions:
Duties are performed in acombination of office and operational settings at the assigned site. The rolerequires regular access to OT tech rooms mechanical and electrical rooms, roofplant and structured cabling pathways. Operates computer and standard officeequipment, such as telephone and copier/printer. Employee must be able to sit,stand, walk, climb or balance, use ladders, hear, use hands, stoop, kneel,crouch, crawl, talk, and reach with hands and arms. Site personal protectiveequipment is required in plant areas. The role includes participation in anon-call escalation rotation and occasional work outside business hours forapproved maintenance windows.
Travel:
- Position is sitebased at [site or campus, city, state].
- Approximately 5%to 10% travel for vendor sites, training and portfolio standards work.
Equal Employment Opportunity: CBRE is an equal opportunity employer that values diversity. We have a long-standing commitment to providing equal employment opportunity to all qualified applicants regardless of race, color, religion, national origin, sex, sexual orientation, gender identity, pregnancy, age, citizenship, marital status, disability, veteran status, political belief, or any other basis protected by applicable law.
Candidate Accommodations: CBRE values the differences of all current and prospective employees and recognizes how every employee contributes to our company’s success. CBRE provides reasonable accommodations in job application procedures for individuals with disabilities. If you require assistance due to a disability in the application or recruitment process, please submit a request via email at
[email protected] or via telephone at +1 866 225 3099 (U.S.) and +1 866 388 4346 (Canada).
