Joe Lam

About Joe Lam

With over 15 years of experience in IT, OT, Engineering and Cybersecurity in the critical infrastructure sector, I specialize in leading cross-functional teams to design and implement secure, innovative, and efficient automation systems that enhance operational performance, strengthen cybersecurity, and promote sustainability.Throughout my career, I’ve achieved impactful results, such as optimizing energy usage for large-scale facilities, developing advanced process control strategies, and implementing robust cybersecurity solutions, all while sharing my expertise to benefit the communities I serve. I’m passionate about leveraging emerging technologies to improve system reliability and efficiency while fostering collaborative and developing high-performing teams.Let’s connect if you’re interested to discuss automation, process controls optimization, cybersecurity, or innovative strategies for addressing complex challenges in critical infrastructure.

Experience

1. Automation Manager (Ics Ot, IT & Cybersecurity)

   Irvine Ranch Water District (IRWD)

   Apr 2019 — Present · Irvine, CA, US

   Established an independent Automation Department in 2016, overseeing ICS/SCADA systems, PLCs, and radio communication networks. In 2018, expanded responsibilities to include all IT infrastructure within the OT environment and created a dedicated Network and Cybersecurity group. In 2019, assumed full ownership of cybersecurity initiatives to further enhance the security posture across the OT environmentsAdvanced Security Implementations:• Deployed SIEM Splunk and Splunk UBA for comprehensive security event monitoring and user behavior analysis.• Integrated Tenable.SC and Tenable.OT for proactive vulnerability management across IT and OT environments.• Implemented Palo Alto Firewalls to enable microsegmentation, strengthening network security and reducing lateral movement risks.• Spearheaded the adoption of cybersecurity best practices within Aveva System Platform, fortifying secure communication protocols and data access across critical OT systems.• Rolled out 2FA across critical systems to enhance user authentication and access control.• Led Cybersecurity Analyst in developing OT/SCADA Specific Incident Response Plan (IRP) and facilitated regular tabletop exercises to assess and improve readiness.In-House Development:• Designed and implemented a custom-built data diode capable of replicating Aveva Historian, WSUS updates, SMTP communications, and secure file transfers.• Developed a file ingestion system validated by 30 antivirus engines before introduction new files into the OT environment, ensuring malware-free integration.Industry Engagement:• Presented at multiple cybersecurity workshops, sharing insights on OT security practices and innovative solutions to industry peers.Leadership:• Built and led a multidisciplinary cybersecurity team, fostering a culture of continuous improvement and collaboration.• Managed cross-functional initiatives to align security policies with business objectives.

Education

• Toronto Metropolitan University

  Mechanical Engineering (Mechatronics), Mechanical, Electrical, Robotic and Computer Programming

  2001 — 2005

• California State University, Fullerton

  Leadership Development for Public Agencies

• University of Toronto

  Master of Engineering (M.Eng.), Civil Engineering

  2008 — 2009

• UC Irvine

  Cybersecurity