OT Security Engineer

• Secure complex and legacy OT infrastructures in industrial environments
• Analyse and map OT networks
• Assess risks and develop mitigation strategies
• Strengthen network segmentation and support IP renumbering
• Configure and manage firewalls, including Fortinet solutions
• Implement OT firewalling, automated network monitoring, or network restructuring
• Continuously monitor OT environments using SNMP, Net Flow, or similar protocols
• Manage Active Directory
• Cooperate with operations, IT, and engineering teams to align security with production needs
• Translate complex OT security concepts into clear business-relevant language
• Represent the company in client meetings and on-site engagements
• Identify risks and propose solutions during commissioning, testing, and audit phases
• Travel to customer sites during key project phases, including commissioning, testing, and audits
• Contribute to projects involving automation, process control, data management, and MES/MOM systems for manufacturers

• Strong analytical mindset and practical/hands-on experience securing industrial environments
• In-depth knowledge of OT security and networking in industrial environments, including SCADA, PLCs, and DCS
• Experience analysing and mapping complex or legacy OT networks
• Hands-on experience with segmentation and IP (re-)numbering of OT networks
• Experience with risk assessments and developing mitigation strategies
• Practical understanding of firewalls, network segmentation, and secure architecture principles
• Understanding of the Purdue model
• Hands-on implementation experience with at least one of OT firewalling, automated network monitoring, or network restructuring
• Proficiency in continuous monitoring using SNMP, Net Flow, or similar protocols
• Knowledge of Fortinet firewall configuration
• Experience with Active Directory management
• Strong verbal and written communication skills
• Excellent English communication skills required
• Spanish and French are strong assets
• Comfortable working cross-culturally and adapting communication style during international travel
• Flexibility for short-term international travel
• Legally authorized to work in the United States without current or future employer-sponsored work authorization
• No explicit educational credential required
• No minimum years of experience specified
• Nozomi Networks experience is a plus
• Cisco certificate is a plus
• Palo Alto firewall configuration is a plus

Demonstrates expertise in securing complex OT infrastructures, including risk assessment, network segmentation, and firewall management. Proficient in translating technical security concepts into business-relevant language while collaborating with cross-functional teams.

• OT Security Expertise
• Network Segmentation
• Firewall Configuration
• Risk Assessment
• Continuous Monitoring

• OT Security
• Network Mapping
• Risk Mitigation Strategies
• IP Renumbering
• Firewalls
• SNMP
• Net Flow
• Active Directory Management
• Purdue Model Understanding
• Automation and Process Control

• Analytical Mindset
• Verbal Communication
• Written Communication
• Cross-Cultural Adaptability
• Flexibility for Travel

• Cisco Certificate

• SCADA
• PLCs
• DCS
• Industrial Environments
• OT Networks

• Fortinet Solutions
• Nozomi Networks
• Cisco
• Palo Alto Firewalls
• MES/MOM Systems