Lead OT Security Engineer

Smurfit Westrock•Atlanta, GA

43d•Hybrid

About The Position

Smurfit Westrock is seeking a forward-thinking Lead Operational Technology Cybersecurity Engineer to join their technology organization. This senior technical role is responsible for securing the systems, networks, and technologies that support the company's manufacturing operations. The position plays a critical role in protecting plant environments while ensuring that cybersecurity controls support, rather than disrupt, safety, reliability, and production. The engineer will work closely with cybersecurity, engineering, maintenance, operations, and vendor teams to design and implement practical security solutions for manufacturing environments. This includes securing industrial networks, improving vendor remote access, supporting network segmentation efforts, troubleshooting technical issues, and guiding sites through cybersecurity improvements. A typical day involves reviewing vendor access requests, troubleshooting network issues, designing secure network segmentation, documenting standards, supporting risk remediation, and advising on cybersecurity control implementation without impacting plant uptime. The role requires a combination of deep technical cybersecurity and networking expertise with a strong understanding of manufacturing environments, serving as a trusted technical advisor to advance the operational technology cybersecurity program across a global footprint.

Requirements

Four or more years of cybersecurity experience, including hands-on experience supporting manufacturing, industrial, operational technology, or critical infrastructure environments.
Strong understanding of industrial control environments, including systems and networks used to support manufacturing operations.
Strong knowledge of networking fundamentals, including routing, switching, firewalls, network segmentation, and secure remote access.
Hands-on experience with cybersecurity technologies, such as firewalls, intrusion detection tools, endpoint security tools, security monitoring platforms, or log management systems.
Experience troubleshooting network connectivity, firewall rules, remote access, and security control issues in operational or production environments.
Ability to design and implement cybersecurity controls while considering safety, uptime, reliability, and operational impact.
Experience working with cross-functional teams, including cybersecurity, information technology, engineering, maintenance, operations, and third-party vendors.
Strong written communication skills, including the ability to create technical documentation, procedures, diagrams, and implementation guidance.
Strong verbal communication skills, with the ability to explain technical issues to both technical and non-technical audiences.
WFH with the ability to travel approximately 30–40%, based on business and project needs.
Occasionally moves, lifts, or positions devices weighing up to 50 pounds
Ability to work reliably in non-climate-controlled industrial environments, including exposure to varying temperatures, dust, and high noise levels.
Must participate in an on-call rotation to support troubleshooting and incident response.

Nice To Haves

Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related field.
Professional cybersecurity certifications such as CISSP, GICSP, GRID, or equivalent certifications.
Experience with operational technology cybersecurity monitoring platforms such as Nozomi Networks, Dragos, Claroty, or similar technologies.
Experience securing vendors and third-party remote access into manufacturing or industrial environments.
Experience with industrial communication protocols such as Modbus, OPC, Ethernet/IP, or similar plant-floor technologies.
Familiarity with cybersecurity frameworks, standards, or regulations such as NIST Cybersecurity Framework, NIST guidance for industrial control systems, ISA/IEC 62443, or European cybersecurity requirements.
Experience supporting cybersecurity audits, assessments, risk registers, remediation plans, or compliance activities.
Experience leading technical projects across multiple manufacturing sites or regions.
Experience leading or participating in OT incident responses.

Responsibilities

Design and implement cybersecurity architectures that protect manufacturing systems, industrial networks, and plant operations.
Develop secure network segmentation, vendor remote access, monitoring, and control strategies that reduce cyber risk while supporting operational reliability.
Troubleshoot and resolve technical issues involving vendor access, network communications, firewall policies, and cybersecurity controls in manufacturing environments.
Support engineering, maintenance, operations, site technology teams, and vendors during cybersecurity implementations, remediations, and incident response activities.
Lead cybersecurity improvement initiatives across manufacturing sites, including secure access, network modernization, monitoring, and risk reduction projects.
Assess cybersecurity risks affecting manufacturing systems and help prioritize remediation based on business impact, safety, reliability, and exposure.
Create technical documentation, network diagrams, standards, implementation guidance, and troubleshooting procedures for operational technology environments.
Partner with cross-functional teams to embed cybersecurity into the lifecycle of manufacturing systems, from design and deployment through ongoing operations.
Collaborate with security operations teams to improve monitoring, escalation, investigation, and response to cybersecurity events affecting manufacturing environments.
Contribute to operational technology cybersecurity policies, standards, risk registers, audit readiness activities, and compliance efforts.
Mentor other cybersecurity engineers and analysts by sharing technical expertise, practical guidance, and operational technology security best practices.
Serve as a subject matter expert for operational technology cybersecurity across Smurfit Westrock.