OT Security Engineer​/Platform Engineer

Location - US Remote with Client Travel (Eastern Time Zone)

You will be the hands-on engineer who turns an OT environment into something the team can see, understand, and secure. You run passive discovery, map architecture and data flows, and make sure the monitoring platform is integrated and working. Your findings feed directly into the authorization package and the remediation plan.

• Plan and run passive asset discovery in live OT environments without disrupting operations.
• Build and maintain architecture diagrams and data-flow maps for system boundary and authorization work.
• Coordinate integration of the OT monitoring platform with network infrastructure, SIEM, and other security tooling.
• Design and tune monitoring workflows so alerts reach the right people with useful context.
• Analyze industrial network communications to baseline normal behavior and flag anomalies.
• Perform technical validation of controls and produce evidence the RMF Lead can map to requirements.
• Develop remediation plans that account for safety, uptime, and maintenance windows.

• Four or more years in network or security engineering, with at least three years in OT or IC S environments.
• Hands-on experience with passive OT visibility and monitoring platforms (for example, Claroty, Dragos, or Nozomi Networks).
• Strong understanding of industrial protocols, network segmentation, and the Purdue model.
• Experience with packet capture and analysis tools such as Wireshark.
• Ability to produce clear architecture and data-flow documentation.
• A relevant certification such as GICSP, Security+, or CCNA.
• Eligibility to work in the United States.

• An active U.S. security clearance, or eligibility to obtain one.
• GIAC GRID or GCIP certification.
• Experience supporting RMF evidence collection.
• Familiarity with SIEM integration for OT telemetry.

NETbuilder is a specialist technology partner founded in 1999. We help enterprises and mid-market organizations lead technology transformation through specialist consulting, managed services, and enterprise in sourcing across security, Service Now, observability, and agentic automation.