Ahmet ADBAY
OT/ICS Cyber Physical Security Consultant
Izmit
Summary
IT/OT Infrastructure & Cybersecurity Manager | Industrial Systems | IEC 62443 | SCADA | Vendor ManagementWith over 15 years of experience in the field of Operational Technology (OT) cybersecurity and Integrated Control and Security Systems (ICSS), Ahmet possesses extensive expertise in the design, engineering, development, testing, and deployment of industrial cybersecurity solutions. He has extensive knowledge and experience in designing transitions for IT/OT convergence, establishing policies, identifying risk points, and working with SCADA/DCS, Industrial Control Systems, and industrial protocols.Ahmet has extensive experience in endpoint services, identity and access management, network monitoring systems, firewall configurations, vulnerability assessments, SIEM integrations, SOC design for OT networks, and compliance, auditing, and consulting for standards such as IEC 62443, NIST, NIS2, and ISO 27001/2. As a contractor in the field of upgrading facilities to systems with enhanced security features, he possesses extensive professional experience in system compliance and integration. Prior to assuming this position, he held roles such as manager, consultant, and auditor in the fields of industrial facilities, critical infrastructure, and production facilities. He was responsible for implementing IT and OT network cybersecurity solutions for Enerjisa Production, Senkron Digital, Barikat Cyber Security, MILGEM (Military Ship), GOSB (Gebze Organized Industrial Zone – Management Office), and the Osman Gazi Bridge (Main Contractor).
Overview
2
2
Languages
10
10
Certificates
18
18
years of professional experience
Work History
Head of OT Cyber Security
Senkron.Energy Digital Services
06.2024 - 04.2026
- Drove national and regional OT cybersecurity maturity at Senkron Digital, leading strategic, technical, and operational domains to secure digital transformation across critical infrastructure and ensure compliance with international and national regulations.
- Core Responsibilities & Achievements:
- Strategic Leadership & Governance: Defined and led OT cybersecurity framework implementation (IEC 62443, NIS2, NIST and EPDK), achieving an average 25% improvement in client compliance scores. Advised clients in energy, smart cities, water, manufacturing, and transportation on threat modeling, security architecture, and regulatory alignment.
- Oversaw 24/7 vendor-agnostic OT SOC operations, enhancing support for critical industrial environments through SIEM integration, industrial protocol-aware intrusion detection, real-time threat intelligence, and coordinated incident response, which reduced average incident response time by 15% and ensured comprehensive monitoring of Modbus, DNP3, IEC 104, OPC UA, and customized detection logic.
- Incident Response & Crisis Management: Led OT cyber incident preparedness and response, including ransomware containment, ICS forensics, and coordination with national CERTs.
- Delivered OT security risk assessments for wind farms, power transmission, and industrial facilities, identifying and mitigating over 50 critical vulnerabilities annually while developing security roadmaps that integrated Zero Trust for OT and ISA/IEC 62443 Zones & Conduits.
- People & Capability Development: Led recruitment/development of OT cybersecurity professionals, fostering cross-skilling across IT/OT, SCADA/ICS, and regulatory auditing. Conducted training on ICS-specific threats (TRITON, Industroyer, etc.)
- R&D: Drove internal research on asset discovery, digital twin environments, OT/ICS honeypots. Led MITRE ATT&CK for ICS integration into detection engineering and threat hunting.
- 3 years 7 months
Head Of OT Security
Enerjisa Üretim
10.2022 - 10.2024
- Plan, execute, and oversee compliance programs aligned with EPDK Cybersecurity Maturity Model, IEC 62443, ISO/IEC 27001, and the Presidency of the Republic of Türkiye Digital Transformation Office (DDO) Cybersecurity Guide.
- Conduct cybersecurity maturity assessments and develop targeted improvement roadmaps for existing and new power generation facilities, enhancing overall security posture.
- Perform OT risk analyses, audits, and threat modeling tailored to industrial control and automation systems.
- Design and maintain OT network segmentation, access control, monitoring, and incident response frameworks to protect critical infrastructure from cyber threats.
- Lead Proof of Concept (PoC) and field testing of emerging OT security technologies, such as OT SOC, SIEM, IDS/IPS, and Zero Trust architectures.
- Deliver technical and managerial cybersecurity awareness training across operations.
- Track regulatory and standards developments to align Enerjisa
- Retim’s OT security strategy with national and international mandates.
- Collaborate with Senkron Digital OT SOC for real-time threat intelligence sharing, incident response, and continuous monitoring to mitigate potential cybersecurity incidents.
- Develop and implement secure architecture designs based on ISA/IEC 62443 Zones & Conduits model for IT-OT integration.
- Ensure documentation integrity, traceability, and continuous improvement in all OT security processes.
- 2 years 1 month
Senior Industrial Security Consultant
Barikat Siber Güvenlik
09.2021 - 10.2022
- Leads projects that provide architectural-level requirements and oversee activities for testing and troubleshooting products and technologies in the customer environment.
- It assists customers in their journey to secure their OT/EKS infrastructure by following standards such as PERA, the NIST cybersecurity framework.
- Performs OT assessment and analysis to help customers identify risks in OT environments.
- Develops work statements with relevant work breakdown structures based on accurate analysis of customer requirements.
- Develops project-related documentation, which may include: High-Level Design, Low-Level Design, Migration Plan, Test Plan, Procedure Methods, Network Implementation Plan, Built-in manual. Establishing and maintaining Professional Services coverage such as templates, methodologies, best practices or lessons learned. The design can integrate different functional blocks, but must be robust, reliable and secure.
- Review peer documents for technical accuracy and quality assurance.
- Participates in continuous improvement by sharing ideas for new services or processes.
- 1 year 2 months
Operational Technologies Expert
GOSB (Gebze Organize Sanayi Bölgesi)
01.2018 - 09.2021
- Management and improvement of all operational technology (OT) and industrial control systems (ICS)of the Organized Industrial Zone, SCADA, OSOS (Automatic Meter Reading System), Integrated Security Platform (Industrial Facility Security), IoT and ICS Cyber Security.
- I have the opportunity to experience emerging technologies, as it is the only OIZ (Organized Industrial Zone) that provides Internet, telephone, data center, and IoT services among the OIZs in Turkey Remote reading of the meters of the factories with RF and receiving alarm information within the scope of the OSOS (Automatic Meter Reading System) project, preparation of OT/ICS infrastructure for the monitoring of electricity distribution centers, natural gas regional stations, water and wastewater pumps fed by the factories within the scope of the SCADA project.
- Ensuring that the existing facility security, control, and monitoring systems such as camera, burglar alarm, fire alarm, access control, emergency announcement are managed from a single-center with the roof software of the monitoring-management-control trio within the scope of the Integrated Security Platform project, Monitoring the assets, versions, vulnerabilities, and firmware information of the products used in ICS/OT and updating them, and carrying out the process with SIEM-SOC-NOC teams within the scope of the OT Security project
- 3 years 9 months
OT-ICS Expert
IHI E&C International Corporation
02.2012 - 02.2018
- Connecting the central office and ste offices n Istanbul via Vodafone infrastructure with an MPLS
- Rerouting the traffic coming from all offices to the Datacenter n Istanbul and using the Datacenter as the Internet gateway
- Terminating the foreign data circus coming through NTT Communications n Datacenter
- Designating the other IP groups procured from Japan to the computers of Japanese personnel and carrying out the required routings
- Preparing, terminating and commissioning more than 50 km of fiber optic infrastructure with the construction sites located between Dilovasi and Altinova
- Establishing the fiber optic transition from Dilovasi to Altinova through the temporary catwalk on the bridge
- 6 years 1 month
System Specialist
Betesan Group
03.2008 - 04.2012
- Monitoring and recording time lapses of the whole construction feild with various models of Axis HD cameras and featuring these records on the website after adding watermark
- Establishing wired and wireless network infrastructure n office niterors and construction sites
- Managing company servers (Linux, Windows) and proving server security
- Installing Storage-based Replication between Dilovasi and Istanbul as a Disaster Recovery
- Using 3G and LTE for mobile internet service
- Internet security, logging and filtering works
- Providing internet access to foreign personnel residences via Vodafone infrastructure
- Checking whether the VPN, Antivirus, Firewall, USB Lock and Disk encryption software of +300 Turkish and +50 Japanese personnel are active and up to date or not
- Ensuring that more than 3000 computers and mobile devices are provided with access to wireless internet n worker residences, dining hall and recreational areas through construction ste-wde guest network and filtering and logging these computers and mobile devices
- Settling the support requests of users
- Providing remote access to the Japan central office.
- 4 years 2 months
Education
Lisans Derecesi - Management Information System
Universidad de Ciencias y Humanidades de Veracruz Quetzalcoatl
Skills
Network Security
Information Security
Certification
ISO/IEC 27001 Information Security Management | LA
Timeline
Head of OT Cyber Security
Senkron.Energy Digital Services
06.2024 - 04.2026
Head Of OT Security
Enerjisa Üretim
10.2022 - 10.2024
Senior Industrial Security Consultant
Barikat Siber Güvenlik
09.2021 - 10.2022
Operational Technologies Expert
GOSB (Gebze Organize Sanayi Bölgesi)
01.2018 - 09.2021
OT-ICS Expert
IHI E&C International Corporation
02.2012 - 02.2018
System Specialist
Betesan Group
03.2008 - 04.2012
Lisans Derecesi - Management Information System
Universidad de Ciencias y Humanidades de Veracruz Quetzalcoatl