Lead Engineer, Manufacturing Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as the leading technical authority on OT security and the main engineering contact for DIS across designated platform operating companies.

• Foster connections with OpCo CIOs, IT leaders, and plant engineers to convert DIS architectural standards into actionable implementation strategies.

• Transform enterprise OT architecture blueprints into detailed engineering designs that encompass firewall policies, VLAN topologies, DMZ architectures, access control regulations, and compensating measures.

• Spearhead projects related to network segmentation, firewall implementation, and DMZ construction through the production cutover phase.

• Collaborate with OT Site Engineers and networking teams during the execution of change windows.

• Lead or provide on-site/on-call technical assistance during cutover while ensuring the protection of production operations, batch processing, and automated manufacturing systems.

• Aid in the rollout of OT remote access controls, phasing out outdated VPNs, direct vendor connections, and consumer-grade remote tools.

• Develop and sustain the OT Security engineering knowledge repository, which includes architectural decisions, implementation guides, deviation justifications, and as-built network schematics.

⛳️ Requirements

• Extensive hands-on experience in designing and executing OT network segmentation within operational industrial environments, including VLAN configurations, industrial firewall setups (Fortinet, Palo Alto, Cisco, or similar), DMZ constructions, and zone-based access controls across multi-site manufacturing operations.

• Proven capability to lead OT network modification projects in environments sensitive to production impacts.

• In-depth knowledge of OT/ICS components and their network interdependencies, such as PLCs, DCS, SCADA, HMI, historian, and BMS systems.

• Familiarity with protocols including Modbus, Profinet, EtherNet/IP, OPC-UA, and BACnet.

• Practical understanding of IEC 62443, NIST SP 800-82, and ISA-99 standards.

• Direct experience in applying security frameworks to address audit findings at manufacturing locations.

• Over 10 years of experience in OT/ICS security engineering or industrial network engineering.

• Significant experience in managing segmentation, firewall deployment, or OT infrastructure initiatives across multiple manufacturing sites at once.

• Willingness to travel 25% of the time.

🏝️ Benefits

• Health care program

• Paid time off

• Medical insurance

• Dental insurance

• Vision insurance

• 401(k)

• Bonus/incentive pay

• Flexible, remote working arrangement

• Remote work from home