OT Cybersecurity Engineer

Description

The company makes American rare-earth permanent magnets for defense, aerospace, and automotive customers, with a focus on national security and economic resilience.

The team is building out its OT security function as the manufacturing environment grows. The role works closely with the Automation and Engineering teams and calls for a safety-first approach alongside strong security skills.

Responsibilities

• Work with the OT Automation group to design a segmented, defense-in-depth architecture covering PLCs, HMIs, historians, MES, engineering workstations, and virtualized systems.
• Secure Rockwell/Allen-Bradley and Siemens control systems, and support other ICS/SCADA platforms as the manufacturing environment expands.
• Maintain IT/OT boundary controls and zone and conduit segmentation, and manage firewall and ACL policies in line with NIST guidance and ISA/IEC 62443.
• Develop, own, align, and enforce internal security standards that manufacturing equipment and OT vendors must meet as contractual handover requirements for the internal OT environment.
• Monitor the OT asset list and industrial protocols such as Modbus, EtherNet/IP, and PROFINET, plus others as they are adopted, for anomalous activity. Stay vendor- and protocol-agnostic as new platforms come in.
• Lead the assessment of OT-relevant controls against the NIST SP 800-53 Low-Impact Baseline, contribute to the System Security Plan (SSP), and build and close out the Plan of Action and Milestones (POA&M).
• Work with the external CMMC compliance partner and the IT security team to keep OT controls consistent with the NIST SP 800-171 and CMMC Level 2 program.
• Specify and implement native OT monitoring systems, and develop Incident Response Plans.
• Work with Automation, Engineering, and IT to build security into new production lines and control system upgrades from the outset.
• Duties may change and are not limited to those listed, based on business needs.

Requirements

• At least 3 years of experience in OT/ICS security, controls engineering, or industrial networking. Manufacturing, defense, or critical infrastructure experience is preferred.
• Hands-on experience with Rockwell/Allen-Bradley (ControlLogix, FactoryTalk) and/or Siemens (S7, TIA Portal, WinCC) is required. You should be comfortable with other ICS/SCADA platforms, industrial protocols (Modbus, EtherNet/IP, PROFINET), and industrial switch technology as the environment grows.
• Working knowledge of ISA/IEC 62443, NIST SP 800-82, and NIST SP 800-53 is required. Experience contributing to an SSP or POA&M for OT systems is a strong plus.
• You must be a U.S. Person, because the role requires access to U.S. export-controlled information or facilities.
• Nice to have: experience as the cybersecurity point of contact with integrators and OEMs during contract execution, commissioning, and implementation.
• Nice to have: experience with OT monitoring software and hardware such as Claroty, Dragos, or Nozomi.
• Nice to have: experience or knowledge of MQTT, Sparkplug, Kafka, or OPC UA.
• Nice to have: prior work supporting DoD programs, federal contractors, or CUI or export-controlled (ITAR/EAR) environments.
• Nice to have: certifications such as CMMC Registered Practitioner (RP), CMMC Certified Professional (CCP), GICSP, CCNA, an ISA/IEC 62443 certificate, or CompTIA Security+.
• Ability to work on the manufacturing floor around industrial equipment and to lift up to 50 lbs as needed.

Conditions

The role works on the manufacturing floor, so you must be able to work around industrial equipment and lift up to 50 lbs as needed.