Regional Water Authority

The threat model for Regional Water Authority starts with physical infrastructure: 1,700 miles of underground pipe, four surface water treatment plants, and the SCADA systems that orchestrate the daily flow of 45 million gallons to nearly 432,000 people across 15 South Central Connecticut municipalities. The attack surface is diffuse and legacy-heavy by nature - a utility's operational technology environment isn't a clean cloud stack, and the consequences of a breach aren't measured in data loss alone but in public health.

As a nonprofit corporation, RWA operates on a mission axis: public health, fire protection, economic continuity. That means security work here carries the weight of essential services. The organization runs 110,000 drinking water tests annually and manages nearly 28,000 acres of watershed land - domains where data integrity and access control have direct, physical-world impact. Employees and board members operate under a stated commitment to innovation and technology, guided by principles the company identifies as Conscious Capitalism.

This is critical infrastructure cybersecurity without the glamor of threat-intel startups or defense contractors. The job is securing systems that can't go down, protecting networks where IT/OT convergence is an ongoing reality, and doing it for a team that works around the clock to keep water flowing. The scope is regional, the stakes are concrete, and the mandate is continuity.