Principal OT Product Security Architect (OT)

Location: Hybrid role requiring proximity to one of the U.S. offices in Grand Rapids, Michigan; Atlanta, Georgia; or Plano, Texas. Applicants must be authorized to work in the United States without current or future sponsorship.

Base pay range: $147,600–$184,500 annually.

Company

Dematic develops warehouse automation products and solutions spanning industrial automation, robotics, machine controls, software, networks, edge systems, and cloud-connected environments.

What you will do

• Define and maintain OT cybersecurity architecture, requirements, standards, and reference architectures for products and customer solutions.
• Lead security architecture and technical design reviews across OT, software, controls, networking, and cloud environments.
• Design secure network architectures with segmentation, zones and conduits, firewalls, industrial DMZs, secure remote access, and OT-to-cloud connectivity.
• Integrate secure-by-design and DevSecOps principles into product and system development lifecycles.
• Lead threat modeling, attack-surface assessments, vulnerability assessments, penetration testing, and risk-based remediation activities.
• Support security monitoring, product certification, audits, incident response, secure recovery, customer security reviews, and cybersecurity capability roadmaps.

Requirements

• Bachelor’s or master’s degree in cybersecurity, computer science, engineering, information technology, or a related field, or equivalent experience.
• 8+ years of cybersecurity, OT/ICS security, product security, network security, or systems engineering experience, including OT cybersecurity architecture design or assessment.
• Experience with industrial automation, robotics, warehouse automation, manufacturing, control systems, PLCs, HMIs, SCADA, industrial networks, firewalls, VPNs, and secure remote access.
• Knowledge of vulnerability management, penetration testing, threat modeling, security monitoring, risk-based remediation, networking, Windows/Linux, cloud environments, and scripting or automation such as Python or PowerShell.
• Knowledge of IEC 62443, NIST CSF, NIST SP 800-82, ISO 27001, and applicable regulations such as the EU Cyber Resilience Act.
• Must be authorized to work in the United States without current or future visa sponsorship and able to travel occasionally to customer sites and Dematic facilities.

Nice to have

• Preferred certifications include CISSP, GICSP, GRID, GCIP, Security+, Network+, and ISA/IEC 62443 certifications.
• Experience influencing technical decisions across engineering and business teams without direct authority.

Culture & Benefits

• Career development opportunities.
• Competitive compensation and benefits.
• Pay transparency.
• Global opportunities.
• Highly collaborative environment focused on technical excellence, integrity, and continuous improvement.