OT Cybersecurity Engineer

OT Cybersecurity Engineer - Baltimore, Maryland

As a Controls Engineer at ACE, you will join a project team delivering automation projects to customers. Your primary job functions will include:

• Architect, deploy, and document OT network infrastructure (switches, routers, firewalls, VLANs, DMZs) and Windows server environments that support industrial control systems.
• Implement cybersecurity controls—intrusion detection/prevention, endpoint hardening, network segmentation, and secure remote access—aligned with IEC 62443 and NIST CSF frameworks.
• Build and maintain Windows environments, including Active Directory, Group Policy, and WSUS patch management.
• Conduct OT network and asset assessments: inventory devices, map data flows, identify vulnerabilities, and deliver prioritized remediation roadmaps.
• Translate complex risk findings into clear, compelling narratives for both plant-floor operators and executive stakeholders.
• Recommend and right-size security solutions that balance operational uptime requirements with cybersecurity best practices.
• Work on cross-office and cross-discipline project teams where you may be the only cybersecurity engineer. Build the skills to mentor junior engineers on OT security principles, network design, and professional development.
• Collaborate with project managers to track project statuses and ensure customer satisfaction.

The successful applicant will have opportunities for advancement into ACE’s senior leadership organization. ACE offers professional development opportunities within all departments of our organization.

Bachelors (or higher) degree in Chemical Engineering, Electrical Engineering, Mechanical Engineering, Robotics Engineering, Bioengineering, Industrial Engineering, Computer Engineering or Computer Science.

• Three+ (3+) hands‑on experience in industrial networking, system administration in an industrial environment, or a closely related discipline.
• Demonstrated expertise with Windows Server, Active Directory, Group Policy, and patching workflows. Virtualization experience (VMware, Hyper‑V).
• Strong working knowledge of managed switches, routers, and firewalls (Cisco, Fortinet, Palo Alto, or equivalent)—comfortable with both CLI and GUI configuration.
• Experience designing and implementing network segmentation, firewall rule sets, and secure architectures in industrial settings.
• Familiarity with OT security frameworks and standards (IEC 62443, NIST SP 800‑82, or similar).
• Familiarity with process control or other manufacturing processes.
• Proven experience in delivering projects to successful conclusion.
  
  Ability to handle a project through its entire lifecycle.
• Strong written and oral communication skills that allow you to communicate complicated concepts both internally and externally.
• Thorough knowledge of business application software (MS Office package).
• Displays a positive and professional demeanor.
• Demonstrates a flexible and cooperative working style.
• Willing to work off‑hours when required.
• Must possess a valid driver’s license.
• Willing to submit to drug testing and/or background checks as mandated for a) employment, and b) customer contract requirements.

• Industry certifications: GICSP, ISA/IEC 62443 Cybersecurity Certificate, CISSP, CCNA/CCNP, or equivalent.
• Direct experience with industrial control systems (DCS, PLC/HMI, SCADA) in manufacturing, utilities, or energy.
• Hands‑on exposure to OT‑specific security tools such as Claroty, Nozomi Networks, Dragos, or Tenable.ot.

Applied Control Engineering, Inc. (ACE) provides employees with a comprehensive and attractive benefits package and salary ranges commensurate with experience.

For more information about Applied Control Engineering, Inc. (ACE), please visit our website at

ACE is committed to a drug‑free workplace. All employment is contingent upon successful completion of drug and background screening.

ACE is an equal opportunity employer. ACE will consider all qualified applicants for employment without discrimination on grounds of disability, sex or sexual orientation, race or national or ethnic origin, age, religion, protected veteran status or any other characteristic protected by law. If you need a reasonable accommodation to meet any of the above qualifications, please contact Human Resources.