Sr Engineer OT Security

Job Location:

Open to Remote, or Hershey, PA
Travel: ~40%

Summary:

This position is for an Industrial Control System Network and Security Engineer in the Controls & Security Technology Solutions Group. The primary responsibilities include deploying asset inventory, network scanning, and other OT security tools across Hershey OT networks. The role is also heavily involved in deploying patches and upgrades to existing OT systems. The engineer must maintain a high level of knowledge in technologies such as Client/Server, Cluster Servers (VMs), Industrial Networking, Industrial Security Systems (firewalls, routers/switches, VPNs), Industrial Network Protocols, and Industrial Internet of Things (IIoT).

• Support deployment of OT security tools (firewalls, asset inventory, scanning)
• Provide support for digital initiatives (switches, DNS, secure remote access)
• Provide support for industrial control systems solutions (servers/SCADAs, HMIs, OS, patching systems, disaster recovery, etc.)
• Provide support for upgrades and virtualization of legacy systems
• Serve as subject matter expert for ICT technologies to ensure security, reliability, and data acquisition through collaboration with manufacturing operations, plant technical assurance, IS digital manufacturing, and capital project delivery teams
• Audit and maintain OT security policies
• Provide IC security awareness and standards training to engineering and manufacturing operations
• Maintain up-to-date knowledge of developments and trends in ICT technologies, IIoT/I4.0, and cybersecurity, reviewing trade journals, attending trade shows and seminars, consulting suppliers, and partnering with other food manufacturing companies

• Working Knowledge of:
  • Developing industrial control systems suitable for implementation in a manufacturing facility within the commercialization timeline and budget
  • Security design process, defense-in-depth/breadth, engineering life cycle, information domains, cross-domain solutions, identification, authentication, and authorization, system integration, risk management
• Experience in the following:
  • Securing cross-domain IT/OT communications and pathways
  • Securing systems running ICT-related communication protocols (Ethernet/IP, OPC, MODBUS, Profinet, etc.) and data formats
• The incumbent must be willing to apply skills across a broad range of domains (ICT, OT, and IT)
• Some Experience in the following:
  • Design, specification, application, installation, configuration, programming, and maintenance of industrial control systems—including robotics, AGVs, PLCs, motion control systems, fieldbus networks, industrial control networks, and HMI/SCADA systems
  • PLC logic and integration of enterprise and control systems; knowledge of S88 and S95 preferred

• The incumbent must possess:
  • Excellent oral and written communication skills
  • Innovative and creative problem‑solving skills
  • Ability and willingness to work in a team environment and with limited supervision
  • Ability, willingness, and demonstrated experience in accomplishing project‑related responsibilities within critical time restraints to meet corporate objectives
• Ability to apply personal integrity to drive the best solution for the department and the company while providing the customer with a strong‑performing manufacturing system for the manufacture of confectionery products
• Excellent interpersonal skills
• Must be open to and comfortable with change
• Open to travel (including international) based on assignment (>40%)

• BS degree in electrical engineering, electrical engineering technology, or other engineering/engineering technology with expertise and experience in industrial control systems
• 4+ years of experience in automation solutions including industrial control networking & security
• Minimum of 2 years experience in food processing, confectionery, pharmaceutical, or related industries preferred
• Experience in leading/supporting multiple projects required
• Working knowledge of standard industry PLC and SCADA/HMI systems
• Advanced knowledge of industrial control network architecture, servers,…