Cloud SCADA for Small Water Utilities: Affordable Remote Monitoring Without an IT Department

The Challenge Facing Small Water Utilities

Water systems serving under 10,000 connections face a regulatory and operational paradox. They are subject to the same Safe Drinking Water Act treatment technique requirements, TCEQ continuous monitoring rules, and AWIA 2018 Risk and Resilience Assessment obligations as large metropolitan utilities — but they operate with a fraction of the staff and budget. A typical small Texas water system might employ one licensed operator and one part-time maintenance worker to oversee a groundwater treatment plant, several booster stations, two elevated storage tanks, and 15–20 miles of distribution main. Paper log sheets and manual rounds were the operational norm for decades.

The technology barrier that historically kept small utilities on paper and chart recorders was cost: traditional on-premise SCADA systems required expensive servers, proprietary software licenses, a local area network infrastructure, and an IT department (or expensive IT contractor) to maintain them. For a system with five remote sites and a total annual budget of $800,000, a $200,000 SCADA capital project was difficult to justify even when the operational case was clear.

Cloud SCADA changes this calculus fundamentally. By hosting the HMI and historian in the cloud, eliminating on-premise servers, and delivering operator access through a web browser or mobile app, cloud SCADA reduces the upfront capital requirement to nearly zero and replaces it with a predictable monthly subscription fee. The result is enterprise-class remote monitoring capability accessible to systems that previously had no automation beyond float switches and manual log books.

It is also worth noting the regulatory context: AWIA 2018 requires community water systems serving more than 3,300 people to complete a Risk and Resilience Assessment every five years. Small utilities in this population tier face the same cybersecurity and infrastructure assessment obligations as large systems, and a documented SCADA system with remote monitoring capability substantially strengthens an RRA.

What Cloud SCADA Means for Water Utilities

In a traditional on-premise SCADA architecture, the SCADA server, historian database, and HMI software all run on hardware located at the treatment plant or utility office. Operators access process graphics from dedicated workstations connected to the local network. Remote access requires a VPN connection back to the plant network. Server hardware requires maintenance, backup, and periodic replacement. Software requires local installation and management.

Cloud SCADA inverts this architecture. The SCADA software, historian database, and HMI run on servers hosted in a commercial cloud environment (AWS, Microsoft Azure, or the vendor's own data centers). Operators access process graphics through any web browser or a dedicated mobile app — no client software installation required. Remote sites communicate to the cloud via outbound cellular connections from RTUs, which means no inbound firewall ports need to be opened at any site. The cloud provider handles server maintenance, backups, redundancy, and security patching.

The field hardware — RTUs, sensors, and instruments at each pump station or treatment site — is the same regardless of whether the system is cloud-hosted or on-premise. The RTU reads sensor values and transmits them over a 4G LTE cellular connection to the cloud server rather than to an on-premise server. From the field equipment perspective, the architecture is largely transparent.

Cloud SCADA Platforms Suitable for Small Water Utilities

• Ignition Perspective (Inductive Automation) with cloud hosting: Ignition's Perspective module provides a fully responsive, browser-based HMI that runs identically on desktop, tablet, and smartphone. Ignition can be deployed on a cloud virtual machine (AWS EC2, Azure VM) with the operator paying for the VM rather than dedicated server hardware. Ignition's unlimited-tag licensing (starting around $15,000–$35,000 depending on modules) makes this particularly cost-effective for utilities with multiple sites, since there is no per-tag or per-site license fee. Ignition Certified Integrators handle cloud deployment and configuration.
• AVEVA Insight: AVEVA's cloud historian and analytics platform connects to on-premise SCADA systems or directly to field devices via AVEVA Edge. Targeted at mid-size to large utilities with existing AVEVA infrastructure seeking cloud historian capabilities.
• Telemetry Solutions WaterView: Purpose-built for small water and wastewater utilities. SaaS model with per-site monthly fees. Includes cellular RTU hardware, cloud hosting, alarm notification, and basic reporting. Minimal configuration required — designed for utilities without dedicated SCADA programmers.
• Aqueduc: Cloud-native water utility monitoring platform designed specifically for small community water systems. Provides web-based dashboards, mobile alarms, compliance logging, and operator log integration. SaaS pricing model makes it accessible without capital expenditure.
• Telog (Roper Technologies): Data logger plus cloud platform for simple monitoring applications — pressure, flow, level. Telog recorders transmit logged data to the Telog cloud portal on a configurable schedule. Well-suited for distribution monitoring where full SCADA control is not required, only data collection and alarm notification.

What Cloud SCADA Costs

Comparing apples-to-apples on cost requires specifying scope. For a small utility with three to five remote sites requiring basic pump status monitoring, level trending, and alarm notification:

• Entry-level cloud monitoring (SaaS model, RTU hardware amortized): $500–$1,500 per month all-in. This includes the cloud platform subscription, cellular data fees, and amortized RTU hardware costs over a five-year subscription term. Minimal upfront capital.
• Traditional on-premise SCADA for the same scope: $80,000–$200,000 upfront capital for server hardware, software licenses, network infrastructure, engineering, and installation. Plus ongoing annual costs for software maintenance (15–20% of license), IT support, and hardware replacement.

Over a five-year period, the total cost of ownership often favors cloud SaaS for small utilities when capital cost of money and IT support are fully accounted. The larger the system and the more complex the control requirements, however, the more the economics shift toward on-premise or hybrid architectures — a large water treatment plant with complex process control needs a full-featured SCADA platform, not a monitoring-only SaaS solution.

Cellular RTU Selection

The RTU at each remote site is the most important hardware decision in a cloud SCADA deployment. Key selection criteria include I/O count, communication protocols, cellular carrier compatibility at the site, and enclosure requirements for the installation environment. Widely deployed options include:

• Cradlepoint IBR600C: Primarily a cellular router, often paired with a separate PLC or I/O module. Well-suited for sites with an existing PLC that needs cellular connectivity added.
• Digi WR31: Ruggedized cellular router with serial and Ethernet connectivity. Supports AT&T, Verizon, and T-Mobile LTE bands. Common in utility applications.
• Red Lion FlexEdge: Combines cellular router, protocol converter, and edge compute in one device. Supports Modbus, DNP3, and OPC UA. Configurable I/O for direct sensor connections. Well-suited for sites where a standalone RTU plus cellular router is preferred.

Before selecting a cellular RTU, verify carrier coverage at each remote site. Rural Texas sites frequently have AT&T or Verizon coverage but not T-Mobile, or vice versa. Dual-SIM RTUs that can failover between carriers provide redundancy for critical sites. Request cellular coverage maps from prospective carriers and conduct a field signal test before committing to a carrier and RTU model.

What You Can Monitor and Control Remotely

A cloud SCADA system with cellular RTUs at remote sites supports monitoring and control of the following parameters typical for small water utilities:

• Pump run/stop status and fault conditions
• Well levels and storage tank levels (continuous analog from ultrasonic or pressure sensors)
• Distribution system pressure at key monitoring points
• Flow totals (gallons per day for billing and regulatory reporting)
• Chlorine residual (if an online analyzer is installed at the site)
• Motor current for pump health monitoring
• Generator run status and fuel level at backup generator sites
• Alarm acknowledgment and setpoint adjustment from the operator's mobile device

Full remote control — starting and stopping pumps, adjusting chemical dosing setpoints — requires appropriate cybersecurity controls and is subject to TCEQ operating rules for unattended systems. Consult your TCEQ regional engineer before implementing full remote control at unattended sites.

Cybersecurity for Cloud SCADA

Cloud SCADA with outbound-only cellular RTU connections offers inherently better security than traditional on-premise SCADA with inbound VPN connections. When a cellular RTU initiates an outbound connection to a cloud server, no inbound firewall ports are required at the remote site — there is no attack surface exposed to the internet at the field level. The cloud server itself is protected by the cloud provider's security infrastructure and the SCADA vendor's application-layer security controls.

All data in transit between the RTU and the cloud server should be encrypted using TLS 1.2 or higher. Operator access to the cloud HMI should require username and password authentication at minimum, with multi-factor authentication strongly recommended. Role-based access control (RBAC) should distinguish between operators who can view and acknowledge alarms and administrators who can change setpoints or system configuration. Cloud SCADA vendors should provide documentation of their security certifications (SOC 2 Type II, ISO 27001) upon request.

TCEQ Requirements for Small Texas Water Systems

TCEQ Chapter 290 — Public Drinking Water — contains specific requirements for monitoring at unattended water systems. Texas utilities that operate unattended surface water treatment plants or groundwater plants with treatment must maintain continuous monitoring of specific parameters and provide alarm notification to an on-call operator. Chapter 290.46 requires that groundwater systems with required treatment maintain the ability to alert a responsible party of system failures at any time. Cloud SCADA with cellular alarm notification directly addresses this requirement.

For surface water systems, TCEQ Chapter 290 Subchapter D specifies continuous turbidity monitoring, disinfection residual monitoring, and CT logging requirements. A cloud SCADA system connected to appropriate online instruments provides the continuous data record required by these rules. Consult TCEQ's current Chapter 290 rules and your TCEQ regional engineer for system-specific requirements.

Transitioning from Chart Recorders to Cloud SCADA

Many small Texas water systems still use circular chart recorders for pressure and chlorine residual logging. Transitioning to cloud SCADA typically involves three phases: sensor assessment (existing sensors may need replacement or calibration verification), RTU installation and cellular configuration at each site, and operator training on the cloud HMI and mobile app. A typical small water utility with three to five sites can complete the transition in two to four weeks per site with an experienced integrator. The regulatory benefit is immediate: cloud historian data provides a superior compliance record compared to paper charts, which are subject to gaps, illegibility, and physical loss.

NFM Consulting Water Automation Services

NFM Consulting designs and implements cloud SCADA systems for small and mid-size water utilities across Texas. Our services include cellular RTU selection and installation, cloud platform configuration (Ignition preferred), sensor replacement and calibration, operator training, and TCEQ compliance documentation support. We work with utilities transitioning from paper logs and chart recorders as well as those upgrading legacy on-premise SCADA. Contact NFM Consulting to discuss a cloud SCADA solution for your water system.