9 дней назад
Lead Engineer, Manufacturing Security (OT/ICS)
150 000 - 180 000$
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Lead Engineer, Manufacturing Security (OT/ICS): Designing and delivering OT network security improvements across manufacturing operating companies with an accent on network segmentation, industrial firewalls, DMZ architecture, and controlled remote access. Focus on leading production-sensitive cutovers, applying IEC 62443 and NIST SP 800-82 to live industrial environments, and securing PLC, DCS, SCADA, HMI, and other ICS networks without disrupting operations.
Location: USA - Remote. The role is fully remote from a home office and includes up to 25% travel.
Annual salary: $150,000–$180,000, plus bonus or incentive pay.
Company
is a global science and technology company operating across life sciences, diagnostics, and biotechnology.
What you will do
- Lead OT network security delivery across a portfolio of operating companies and serve as the senior technical engineering contact.
- Translate enterprise OT architecture into implementation designs covering firewall policies, VLAN topology, DMZ architecture, access controls, and compensating controls.
- Coordinate production-sensitive network change windows with plant operations, safety teams, OT site engineers, and network teams.
- Lead segmentation cutovers while protecting production operations, batch processes, and automated manufacturing systems from disruption.
- Deploy approved and monitored OT remote access controls to replace legacy VPNs, direct vendor connections, and consumer-grade tools.
- Document architecture decisions, implementation playbooks, deviations, and as-built network diagrams.
Requirements
- 10+ years of OT/ICS security engineering or industrial network engineering experience, including leadership of projects across multiple manufacturing sites.
- Hands-on experience with OT network segmentation, VLAN architecture, industrial firewalls such as Fortinet, Palo Alto, or Cisco, DMZs, and zone-based access controls.
- Experience leading network changes in live production environments while coordinating production cycles, plant operations, and safety requirements.
- Strong knowledge of PLC, DCS, SCADA, HMI, historian, and BMS systems and protocols including Modbus, Profinet, EtherNet/IP, OPC-UA, and BACnet.
- Working knowledge of IEC 62443, NIST SP 800-82, and ISA-99, with practical experience remediating manufacturing-site audit findings.
- Ability to work remotely from the USA and travel up to 25%.
Nice to have
- Experience managing concurrent segmentation or infrastructure projects across multiple operating companies and plants.
- Familiarity with Claroty, Nozomi Networks, Dragos, or Armis for OT asset discovery and network visibility.
Culture & Benefits
- Remote work arrangement from a home office.
- Medical, dental, and vision insurance.
- Paid time off and comprehensive employee benefits.
- 401(k) plan for eligible employees.
- Bonus or incentive pay eligibility.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
Ramp
7 дней назад
Systems Engineer (Corporate Security)
144 000 - 199 000$
Tokio Marine HCC
13 дней назад
Senior Engineer, MDR (Cybersecurity)
117 200 - 175 800$
10 дней назад
Principal Cybersecurity Engineer (US Federal)
184 800 - 277 200$
CrowdStrike
10 дней назад
Automation Engineer II, Falcon Complete (Remote)
100 000 - 145 000$
10 дней назад
Senior IT Systems & Security Engineer (CedD226)
148 750 - 201 250$
11 дней назад
Principal Cyber Security Engineer US Federal
184 800 - 277 200$