The Quiet Drain: How Foreign Competitors Are Systematically Extracting America's Critical Infrastructure Expertise
The Expertise Problem Nobody Is Measuring
American national security discourse invests enormous analytical energy in tracking hardware — weapons systems, semiconductor supply chains, satellite constellations, naval tonnage. The analogous problem in the human capital domain receives a fraction of that attention, and the gap is consequential. Across the utilities, water authorities, transportation agencies, and industrial facilities that constitute America's critical civilian infrastructure, a quiet and largely unmeasured drain of specialized technical knowledge is underway. The destinations for that knowledge include foreign governments and state-linked enterprises with documented interests in understanding, mapping, and ultimately compromising the systems that American civilian life depends upon.
This is not a future threat. The recruitment architecture is operational. The incentive structures are well-calibrated. The institutional blind spots that allow the process to continue largely undetected are, in several cases, the product of deliberate adversary analysis of American regulatory and oversight frameworks.
Who Gets Targeted and Why
The profile of expertise that foreign recruitment networks prioritize in the civilian infrastructure domain is specific and revealing. Senior engineers with operational knowledge of supervisory control and data acquisition systems at power utilities represent a primary target category — not because their credentials are rare, but because their knowledge of system-specific configurations, redundancy architectures, and operational procedures cannot be extracted from open sources or reverse-engineered from equipment specifications. A foreign actor that wants to understand how a particular regional grid responds to cascading load failures needs someone who has managed that kind of event firsthand.
Water system operators with experience in treatment chemistry and distribution network management represent a second high-value category, particularly those with familiarity with the legacy systems that characterize most American municipal water infrastructure. Transportation specialists — including those with backgrounds in air traffic management, rail switching systems, and port logistics software — round out the core target set. What these professionals share is the possession of tacit, experience-based knowledge that cannot be acquired through technical document theft alone and that would be operationally valuable to an adversary planning infrastructure disruption at scale.
The recruitment channels through which foreign intelligence services and state-linked enterprises access these professionals are, in many cases, entirely legitimate on their surface. Academic conference networks, international professional associations, consulting firm intermediaries, and LinkedIn-style professional platforms all function as recruitment surfaces. The initial contact is frequently framed as a consulting opportunity, a speaking invitation, or a collaborative research partnership. Compensation offers are calibrated to be attractive without being conspicuous — a meaningful supplement to a government utility salary rather than the kind of windfall that might trigger self-reporting.
The Institutional Blind Spot Architecture
Several structural features of the American civilian infrastructure sector create conditions that are unusually favorable to foreign talent acquisition operations. The first is the jurisdictional complexity of infrastructure oversight. Most American utilities, water authorities, and transportation agencies are regulated at the state or local level, with federal security oversight that is advisory rather than mandatory in most circumstances. The Cybersecurity and Infrastructure Security Agency carries significant convening authority and analytical capacity, but its ability to mandate security practices — including personnel security practices — at state-regulated utilities is limited by statute.
The second structural feature is the compensation gap between public-sector infrastructure positions and private-sector alternatives. The engineers and operators who hold the most operationally significant knowledge are frequently among the most financially mobile members of their professional cohort. A foreign-linked consulting arrangement that offers two to three times their annual salary for a series of technical briefings represents a rational economic choice for an individual who has no framework for evaluating its national security implications. Most do not receive counterintelligence briefings. Many work for organizations that have no formal insider threat program.
The third feature is the absence of systematic tracking mechanisms for the kind of knowledge transfer that foreign recruitment operations are designed to achieve. American export control frameworks are well-developed for hardware and software with obvious military applications. They are considerably less developed for the tacit operational knowledge that experienced infrastructure professionals carry. When a senior water treatment engineer accepts a paid advisory role with a foreign consulting firm and shares detailed knowledge of American municipal system vulnerabilities in the course of that engagement, no regulatory mechanism is likely to flag the transaction.
Mapping the Acquisition Networks
Chinese state-linked talent acquisition programs have received the most sustained attention from American counterintelligence analysts, and the civilian infrastructure domain is no exception to the broader pattern those programs exhibit. Entities with documented connections to Chinese state priorities have funded infrastructure-focused research partnerships at American universities, created industry liaison programs that provide access to utility professionals, and established consulting networks that serve as intermediaries between American technical experts and Chinese state enterprise clients. The Thousand Talents Program and its successor initiatives provided an institutional framework for some of this activity, though the operational networks it helped build have demonstrated resilience beyond the formal program's exposure.
Russian intelligence services have pursued a more operationally focused approach, with particular emphasis on recruiting individuals with specific knowledge of industrial control system configurations at energy facilities. Iranian-linked networks have shown growing sophistication in targeting water and wastewater system expertise, consistent with that actor's demonstrated interest in American water infrastructure as a potential coercion vector. The targeting is not random. It reflects careful pre-operational research into where American infrastructure is most vulnerable and what knowledge would be most valuable to an adversary seeking to exploit those vulnerabilities.
A Pre-Kinetic Competition
What distinguishes the expertise acquisition threat from more visible forms of infrastructure risk is its position on the conflict timeline. Cyberattacks on infrastructure generate immediate detection and response obligations. Physical sabotage triggers law enforcement and potentially military responses. The systematic recruitment of infrastructure expertise operates in a pre-kinetic space where no single transaction constitutes an act of aggression and the cumulative effect is visible only in aggregate — and only if someone is aggregating the data.
Building the analytical and regulatory capacity to track that aggregate effect requires a set of institutional investments that the American security community has not yet made at scale. Personnel security frameworks need to be extended to cover critical civilian infrastructure roles that currently fall outside national security clearance requirements. Counterintelligence engagement with the utility and transportation sectors needs to move beyond periodic briefings to sustained, sector-specific outreach programs with real reporting mechanisms. And the jurisdictional complexity that currently insulates state-regulated infrastructure from federal security oversight needs to be addressed through legislative frameworks that can establish minimum personnel security standards without displacing state regulatory authority.
The adversaries conducting these operations are patient. They are building knowledge bases and operational maps that will be relevant not in the next budget cycle but in the next strategic confrontation. The window for closing the institutional gaps they are exploiting is open now. It will not remain open indefinitely.