Lead Engineer – Operational Technology Network Security

Cencora • Conshohocken, PA

5d

About The Position

The Lead Engineer – Operational Technology Network Security designs, implements, maintains, and continuously improves security controls protecting operational technology environments, industrial networks, distribution center systems, and connected devices. The role serves as a subject matter expert in OT network segmentation, secure architecture, threat detection, vulnerability management, incident response, and compliance across enterprise operational environments. It partners with Information Security, Infrastructure, Network Engineering, Distribution Center Operations, Facilities, Engineering, and business leaders to keep OT environments resilient, compliant, and aligned with enterprise security standards.

The role leads OT security design and implementation, develops security policies and architectures, oversees service-level and control performance expectations, and advises stakeholders on OT security risks and technology changes. It coordinates with technical and site operations teams to ensure systems meet security standards, supports incident response and compliance activities, analyzes security metrics, and provides technical guidance, coaching, and mentorship to other engineers and team members.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related discipline, or equivalent related experience.
• At least 6 years of directly related or relevant experience, preferably in information security.
• Knowledge of operational technology and industrial network security.
• Knowledge of network architecture, routing, switching, firewalling, VPN, IDS/IPS, proxies, and secure remote access.
• Knowledge of OT network segmentation, Purdue Model architecture, zones and conduits, zero trust, and defense-in-depth.
• Knowledge of industrial cybersecurity frameworks and standards, including ISA/IEC 62443, NIST SP 800-82, NIST CSF, ISO 27001, PCI, and SOX where applicable.
• Knowledge of industrial protocols and environments such as Modbus, BACnet, OPC, Ethernet/IP, PROFINET, SCADA, PLCs, HMIs, and building automation systems.
• Knowledge of threat modeling, root cause analysis, vulnerability management, patch risk assessment, compensating controls, and exception management.
• Knowledge of identity and access management for privileged and remote access in OT environments.
• Knowledge of incident response, cyber operations, threat hunting, monitoring, and logging for hybrid IT/OT environments.
• Knowledge of cloud-connected OT and IoT/IIoT security considerations.
• Knowledge of security governance, compliance assessments, risk acceptance processes, and third-party risk reviews.
• Knowledge of business continuity, disaster recovery, and resilience for operational environments.
• Behavioral skills in conflict resolution, creativity and innovation, decision making, planning, and presentation.
• Knowledge of Microsoft Office Suite, security tools, OT security monitoring platforms, firewall and network platforms, ticketing and collaboration tools, and scripting or query languages used for automation, reporting, and analysis.

Nice To Haves

• Global Industrial Cyber Security Professional (GICSP) certification.
• GIAC Response & Industrial Defense (GRID) certification.
• ISA/IEC 62443 Cybersecurity Certificate or related ISA/IEC 62443 certifications.
• Certification in Information Security Strategy Management (CISM).
• Certified Information Systems Security Professional (CISSP) certification.
• CompTIA Security+ certification.
• Cisco Certified Network Designations (CCNA, CCNP, CCIE).
• Experience with OT and industrial security monitoring platforms such as Armis, Nozomi Networks, Claroty, Dragos, or Microsoft Defender for IoT, or equivalent technologies.
• Experience with firewall and network platforms such as Palo Alto Networks, Fortinet, Cisco, or Check Point, or equivalent technologies.
• Experience with scripting or query languages such as Python, PowerShell, SQL, KQL, JavaScript, or HTML/CSS, or equivalent tools.

Responsibilities

• Lead the design, implementation, and maintenance of security controls across OT networks, distribution centers, industrial control systems, building automation systems, IoT devices, and connected operational platforms.
• Develop and implement OT security policies, procedures, standards, and reference architectures across industrial, network, cloud, and application environments.
• Oversee service-level agreements and control performance expectations for OT network security services, monitoring, and response.
• Partner with business, IT, engineering, facilities, and operations leaders to communicate OT security risks, evaluate business impact, and provide technical guidance.
• Coordinate with network engineers, infrastructure teams, systems administrators, and site operations teams to ensure OT systems and security devices meet enterprise standards and operate as designed.
• Review technical and functional design documents and provide security architecture guidance on OT networks, segmentation, remote access, identity and access management, secure connectivity, and IT/OT data flows.
• Build, maintain, and implement cybersecurity, network security, data security, and cloud-integrated security solutions.
• Serve as a subject matter expert in OT network security, including Purdue Model architecture, segmentation, secure remote access, firewall policy, industrial protocols, asset visibility, and legacy-system compensating controls.
• Monitor, analyze, and communicate emerging cyber threats, vulnerabilities, exploits, and adversary techniques relevant to OT environments and connected operational technologies.
• Provide technical support to network and systems administrators, maintain infrastructure, improve system performance, and automate security administration where appropriate.
• Respond to OT and network security alerts, escalate critical incidents, and participate in incident response exercises, tabletop exercises, and remediation.
• Analyze security metrics, operational control data, and KPIs for executive and technical leadership.
• Provide security briefings and technical recommendations on issues affecting operations, distribution center availability, network resilience, or regulatory compliance.
• Advise business and technical teams on the security impact of proposed technology, configuration, process, or architectural changes.
• Collaborate with product, engineering, operations, and information systems teams to embed security requirements throughout technology design, deployment, maintenance, and decommissioning.
• Provide technical guidance, coaching, and mentorship to Engineers I/II/III and other team members.
• Support audits, assessments, and compliance activities related to OT security, network security, cyber risk, information security standards, and applicable regulatory or customer requirements.

Benefits

• Medical, dental, and vision care.
• Benefits supporting physical, emotional, financial, and social wellness.
• Support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave.
• Training programs and professional development resources.
• Mentorship programs.
• Employee resource groups.
• Volunteer activities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior