Lead Engineer - Operational Technology Network Security

Location: Conshohocken

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere.

Apply today!


Job Details


Summary:

The Lead Engineer - Operational Technology Network Security is responsible for designing, implementing, maintaining, and continuously improving security controls that protect operational technology environments, industrial networks, distribution center systems, and connected devices. This role serves as a subject matter expert for OT network segmentation, secure architecture, threat detection, vulnerability management, incident response, and compliance across enterprise operational environments. The position partners closely with Information Security, Infrastructure, Network Engineering, Distribution Center Operations, Facilities, Engineering, and business leaders to ensure OT environments are resilient, compliant, and aligned with enterprise security standards.

Primary Responsibilities:

• Leads the design, implementation, and ongoing maintenance of security controls across operational technology networks, distribution center environments, industrial control systems, building automation systems, IoT devices, and connected operational platforms.
• Develops, refines, and implements OT security policies, procedures, standards, and reference architectures across multiple industrial, network, cloud, and application environments to meet internal and external compliance responsibilities.
• Oversees maintenance of service-level agreements and control performance expectations to ensure OT network security services, monitoring capabilities, and response activities are operating effectively.
• Partners with business, IT, engineering, facilities, and operations leaders to communicate OT security risks, evaluate business impact, and respond to requests for technical guidance, assistance, and information.
• Coordinates with network engineers, infrastructure teams, systems administrators, and site operations teams to ensure OT servers, network devices, industrial systems, and security devices conform to enterprise security standards and are operating as designed.
• Reviews technical and functional design documents and provides security architecture guidance for OT networks, network segmentation, remote access, identity and access management, secure connectivity, and data flows between IT and OT environments.
• Builds, maintains, and implements cybersecurity, network security, data security, and cloud-integrated security solutions that protect physical and intangible company assets.
• Serves as a subject matter expert for OT network security, including Purdue Model architecture, network segmentation, secure remote access, firewall policy, industrial protocol considerations, asset visibility, and compensating controls for legacy systems.
• Monitors, analyzes, and communicates emerging cyber threats, vulnerabilities, exploits, and adversary techniques relevant to OT environments, distribution centers, network infrastructure, and connected operational technologies.
• Provides technical support to network administrators and systems administrators, monitors and maintains current infrastructure, improves system performance, and automates security administration where appropriate.
• Responds to security alerts involving OT or network environments, escalates critical incidents to appropriate support teams, and participates in incident response exercises, tabletop exercises, and remediation efforts.
• Analyzes security metrics, operational control data, and KPIs to generate insights for executive and technical leadership review.
• Provides security briefings and technical recommendations to advise stakeholders on critical issues that may affect enterprise operations, distribution center availability, network resilience, or regulatory compliance.
• Consults with business and technical teams on the security impact of proposed technology, configuration, process, or…