Sr OT Cybersecurity Engineer; ICS​/Mfg

BCTG’s direct manufacturing client is seeking a Senior OT Cybersecurity Engineer (ICS / Manufacturing) to support the implementation and execution of a global Operational Technology (OT) cybersecurity program across multiple manufacturing facilities.

This role will work closely with OT Security Architects, cybersecurity teams, manufacturing sites, controls engineers, and plant operations teams to assess, deploy, validate, and maintain cybersecurity solutions within industrial environments.

The ideal candidate will have hands-on experience supporting OT/ICS environments and understand the unique challenges of securing manufacturing systems while maintaining production uptime and operational reliability.

This position will be responsible for technical execution of OT security initiatives including asset validation, endpoint security deployments, vulnerability remediation, patch management, firmware upgrades, security tooling implementation, and system validation.

• Perform OT asset discovery and validation activities across manufacturing environments.
• Validate industrial assets including:
  
  Industrial PCs (IPCs)
• Servers
• HMIs
• PLCs
• Drives
• IO modules
• Embedded systems
• Document hardware, operating systems, software versions, configurations, and dependencies.
• Validate Windows operating systems, including legacy environments such as:
  
  Windows XP
• Windows 7
• Windows 10
• Perform application mapping and identify critical IC/SCADA applications including:
  
  Wonderware
• Ignition
• Factory Talk
• Other industrial automation platforms

• Support deployment of OT cybersecurity solutions across manufacturing assets.
• Execute endpoint security deployments while minimizing impact to production systems.
• Support technologies such as:
  
  Crowd Strike Falcon
• Claroty
• Tenable
• Cortex XDR
• Other OT security platforms
• Validate security agent compatibility with industrial applications and systems.
• Configure or support exclusions, exceptions, and compensating controls as required.
• Troubleshoot deployment issues and recommend remediation approaches.

• Support OT vulnerability remediation activities.
• Apply approved operating system patches and security updates.
• Support patch management processes using tools such as WSUS or similar technologies.
• Validate patch compatibility with manufacturing applications and industrial systems.
• Support firmware upgrades for:
  
  PLCs
• HMIs
• Drives
• IO modules
• Embedded operating systems
• Implement compensating controls when vulnerabilities cannot be directly remediated.

• Perform functional testing after security changes are implemented.
• Validate that:
  
  HMIs continue communicating with PLCs.
• Industrial applications function correctly.
• Manufacturing processes are not impacted.
• Security controls are operating as expected.
• Capture baseline and post-change performance metrics.
• Support rollback procedures when changes impact system functionality.
• Troubleshoot OT security deployments while maintaining production requirements.

• Validate OT network connections and communication requirements.
• Support review of industrial network topology.
• Ensure security controls do not disrupt required industrial protocols.
• Assist with OT asset visibility and vulnerability management initiatives.
• Partner with OT Security Architects on technical recommendations.

• Deployment records
• Security configurations
• Patch records
• Issues and resolutions
• Validation results
• Provide technical updates to OT Security leadership and project teams.

• 5+ years of cybersecurity, infrastructure, controls, or industrial technology experience.
• Hands‑on experience supporting Operational Technology (OT), Industrial Control Systems (ICS), or manufacturing environments.
• Strong understanding of industrial automation environments including:
  
  PLCs
• HMIs
• SCADA systems
• Manufacturing networks
• Experience implementing cybersecurity solutions within production environments.
• Experience with OT security technologies, endpoint protection, vulnerability management, or asset discovery tools.
• Experience performing:
  
  Asset assessments
• Security deployments
• Patch management
• Vulnerability remediation
• Technical troubleshooting
• Ability to work with plant personnel, controls engineers, and technical teams.
• Strong troubleshooting and problem‑solving skills.
• Ability to work independently in a manufacturing environment.

• Experience with OT cybersecurity tools including:
  
  Crowd Strike Falcon
• Claroty
• Tenable
• Cortex XDR
• Experience deploying security agents in manufacturing environments.
• Industrial applications
• SCADA platforms
• Factory automation systems
• Experience with:
  
  IEC 62443
• NIST Cybersecurity Framework
• Experience in regulated manufacturing environments:
  
  Pharmaceutical
• Life Sciences
• Medical Device
• Food & Beverage
• Industrial Manufacturing
• Cybersecurity certifications preferred:
  
  Security+
• CISSP
• GICSP
• ISA/IEC 62443
• GIAC certifications