Principal - IT/OT Security Engineer

Cargill • Shorewood, MN

8d • $150,000 - $220,000

About The Position

The Principal, IT/OT Security job leads the strategic design, implementation, and improvement of cybersecurity protective technologies across enterprise and manufacturing environments. As a subject matter authority in cyber engineering and technology operations, the role connects plant IT and operations stakeholders with global cybersecurity capabilities to protect IT and operational technology systems and networks. It applies broad knowledge of identity and access management, governance, risk and compliance, and cloud security, with deep hands-on expertise in incident response, endpoint security, and network security. The position balances cyber risk reduction with employee safety, product quality, production stability, legacy and end-of-support technology constraints, and original equipment manufacturer dependencies.

The role leads cybersecurity technology design and implementation, manages endpoint detection and response, network segmentation and monitoring, partner and OEM connectivity, operational technologies, and IoT security. It coordinates with cybersecurity, plant, engineering, operations, and vendor teams; advises on IT service management interfaces; researches complex security needs; assesses risks and controls; and supports incident response, containment, recovery, and lessons learned. Security changes must account for safety, quality, operational validation, maintenance windows, and rollback requirements.

The expected salary is $150,000–$220,000 per annum. The role is eligible for a discretionary incentive award. Cargill offers a comprehensive benefits program, with benefits dependent on the position offered and hours worked. Minnesota Sick and Safe Leave accrues at one hour for every 30 hours worked, up to 48 hours per calendar year unless otherwise provided by law.

Requirements

• At least 6 years of relevant work experience; the role typically reflects 10 years or more of relevant experience.
• Broad knowledge of identity and access management, governance, risk and compliance, and cloud security.
• Deep hands-on expertise in incident response, endpoint security, and network security.
• Knowledge of industrial architectures and Purdue model layers.
• Ability to assess IT and OT risks and evaluate security controls in light of safety, product quality, production stability, legacy systems, end-of-support technology, vendor supportability, performance, and availability.
• Experience coordinating with cybersecurity, plant IT, operations, engineering, and vendor stakeholders.

Responsibilities

• Lead the design, implementation, and improvement of cybersecurity protective technologies across IT and manufacturing environments, including endpoint detection and response, network protections, secure remote access, cloud infrastructure controls, and identity and access controls.
• Lead endpoint detection and response, network segmentation and monitoring, partner and original equipment manufacturer connectivity, operational technologies, and Internet of Things security.
• Apply knowledge of industrial architectures and Purdue model layers to assess risks, identify compliance gaps and root causes, and recommend practical improvements, compensating controls, and cost-benefit analyses.
• Coordinate shared cybersecurity initiatives with global cybersecurity teams, business information security officers, plant IT leadership and managers, engineering, operations, and OT technology OEMs.
• Advise on IT service management interfaces, including asset, change, configuration, problem, and incident management.
• Ensure plant security changes follow safety, quality, operational validation, maintenance-window, and rollback requirements.
• Research complex IT and OT security needs, including security requirements definition, architecture and systems analysis, and risk assessment.
• Evaluate agents, patches, configuration changes, and other controls with regard to system criticality, end-of-support technology, vendor supportability, performance, and availability.
• Apply security policies, standards, and governance requirements to manufacturing environments; partner with risk and control teams to document exceptions, define proportionate compensating controls, and support compliance.
• Partner with CCO on complex plant IT and OT incident response, coordinating containment, evidence preservation, recovery, and lessons learned with incident response, endpoint, network, plant, engineering, and vendor teams.
• Influence collaboration among cybersecurity, business information security, plant IT and operations, data privacy and risk partners, OEMs, external experts, and other parties to enable effective security protections and business objectives.

Benefits

• Comprehensive benefit program, including medical and/or other benefits depending on the position offered and hours worked.
• Discretionary incentive award dependent on company and personal performance.
• Minnesota Sick and Safe Leave accruals of one hour for every 30 hours worked, up to 48 hours per calendar year unless otherwise provided by law.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: No Education Listed