Energy Sector Briefing: Aramco-McDermott PMC Deal and Offshore Digital Security in Focus

## Energy Sector Briefing: Aramco-McDermott PMC Deal and Offshore Digital Security in Focus A pair of notable developments from the upstream and offshore energy sectors highlight growing investment in large-scale project delivery and cybersecurity infrastructure for distributed maritime and offshore workforces. ### Aramco Taps McDermott for Long-Term PMC Agreement Houston-based engineering and construction firm McDermott has been selected by Saudi Aramco as one of 11 contractors awarded a Project Management Consultancy (PMC) Long-Term Agreement (LTA), according to a company announcement dated June 3, 2026. The agreement, executed via McDermott Nederland B.V., is designed to support the delivery of large-scale energy, downstream, petrochemical, and infrastructure projects across Aramco's extensive portfolio. The LTA structure is significant for the offshore and energy construction sector, as it provides McDermott with a framework for sustained engagement with one of the world's largest energy producers. Long-term agreements of this nature are increasingly favoured by major operators seeking to streamline contractor relationships and ensure continuity of expertise across multi-year capital programmes. For McDermott, the selection reinforces its position as a key consultancy partner in the Middle East energy market. ### Keeper Security Secures DrillDocs' Offshore Engineering Workflows In a development relevant to the growing cybersecurity demands of offshore operations, Chicago-based Keeper Security has announced the deployment of its KeeperPAM privileged access management platform across DrillDocs' global offshore engineering operations. According to the announcement, the solution is designed to secure round-the-clock engineering workflows and eliminate credential risks across a distributed, bring-your-own-device (BYOD) workforce. DrillDocs, which provides engineering documentation and data management services to the offshore drilling sector, operates across multiple time zones with personnel accessing sensitive technical systems remotely. The adoption of zero-trust, zero-knowledge identity security architecture reflects a broader industry trend as offshore operators and their service providers face increasing regulatory and operational pressure to harden digital infrastructure against cyber threats. The move underscores the particular vulnerability of distributed offshore workforces, where personnel may access critical systems from vessels, remote onshore offices, or personal devices — environments that present unique challenges for traditional perimeter-based security models. ### Context Both developments reflect the continued maturation of the offshore energy services sector, where large operators are consolidating contractor relationships through structured long-term agreements, while service companies are investing in enterprise-grade digital security to protect sensitive operational data. As offshore projects grow in complexity and geographic scope, robust project management frameworks and cybersecurity protocols are becoming baseline requirements rather than optional enhancements.