12 дней назад
OT Cybersecurity Engineer (ICS/SCADA)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
OT Cybersecurity Engineer (ICS/SCADA): Securing industrial control systems and manufacturing-floor devices across PLCs, historians, MES, and related OT platforms with an accent on IT/OT segmentation, asset protection, and NIST-based compliance. Focus on designing defense-in-depth architectures, monitoring industrial protocols, implementing OT incident response, and integrating security into new production lines and control-system upgrades.
Location: Research Triangle Park, NC, United States; on-site work on the manufacturing floor is required. Must be a U.S. Person due to access to U.S. export-controlled information or facilities.
Company
Manufactures American rare-earth permanent magnets for secure and resilient applications in defense, aerospace, automotive, and other critical industries.
What you will do
- Design and enforce segmented, defense-in-depth IT/OT architectures for PLCs, HMIs, historians, MES, engineering workstations, and virtualized systems.
- Secure Rockwell/Allen-Bradley, Siemens, and other ICS/SCADA platforms across the manufacturing environment.
- Manage IT/OT boundary controls, zones, conduits, firewalls, and ACL policies aligned with NIST and ISA/IEC 62443.
- Define and enforce OT security standards for manufacturing equipment vendors and contractual handovers.
- Monitor OT assets and industrial protocols for anomalous activity, and implement native OT monitoring systems.
- Lead OT control assessments, contribute to the SSP and POA&M, and develop incident response plans in coordination with IT, Automation, Engineering, and external compliance partners.
Requirements
- 3+ years of experience in OT/ICS security, controls engineering, or industrial networking, preferably in manufacturing, defense, or critical infrastructure.
- Hands-on experience with Rockwell/Allen-Bradley ControlLogix and FactoryTalk and/or Siemens S7, TIA Portal, and WinCC.
- Experience with industrial protocols and networking technologies including Modbus, EtherNet/IP, and PROFINET.
- Working knowledge of ISA/IEC 62443, NIST SP 800-82, and NIST SP 800-53.
- Must be a U.S. Person due to export-controlled information or facility access.
- Ability to work on the manufacturing floor and lift up to 50 lbs as needed.
Nice to have
- Experience with Claroty, Dragos, Nozomi, MQTT, Sparkplug, Kafka, or OPC UA.
- Experience working with integrators and OEMs during contracting, commissioning, and implementation.
- Experience supporting DoD programs, federal contractors, or CUI/export-controlled ITAR/EAR environments.
- CMMC RP, CMMC CCP, GICSP, CCNA, ISA/IEC 62443, or CompTIA Security+ certification.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →