Principal OT Product Security Architect

Description

You will lead the technical side of OT product security architecture for the company and report to the Chief Product Security Architect.

You will advise product development, sales and support teams on security and help shape and carry out a technical security strategy for all of the company's OT products.

You will help build secure products and keep them secure once customers run them, while helping teams grow their security knowledge and practice.

You will work with technology leaders and engineers to set the direction of the Product Security group and serve as a key resource for defending systems and data while meeting relevant regulatory requirements.

Responsibilities

• Give technical direction so the company's products and solutions are secure by design and protect customers' supply chain operations, covering OT/ICS, warehouse automation, machine controls, robotics, software, networks, edge systems and cloud-connected setups.
• Own the OT cybersecurity architecture, requirements, standards and reference designs for products and solutions.
• Lead security architecture and technical design reviews across OT, software, controls, networking and cloud.
• Design secure network layouts, including segmentation, zones and conduits, firewalls, industrial DMZs, secure remote access and OT-to-cloud links.
• Bring secure-by-design and DevSecOps practices into product and system development lifecycles.
• Set cybersecurity requirements for products, systems, software, embedded components and customer deployments.
• Lead or contribute to threat modeling, attack-surface and vulnerability assessments, penetration testing and architecture assessments.
• Build risk-based approaches to OT vulnerability remediation, using compensating controls where patching could affect safety, availability, reliability or operations.
• Define requirements for OT security monitoring platforms and how they connect to customer SOC, SIEM and MDR environments.
• Turn IEC 62443, NIST CSF, NIST SP 800-82, ISO 27001 and the EU Cyber Resilience Act (CRA) into technical requirements.
• Support product certification, conformity assessments, audits, customer security reviews and cybersecurity evidence gathering.
• Run or support OT cybersecurity assessments of company and customer environments and recommend practical fixes.
• Work with Engineering, Product Security, Infrastructure and Operations to develop secure architectures across the product lifecycle.
• Advise during OT cybersecurity incidents and help with secure recovery and resilience strategies.
• Coach cybersecurity, software, controls and engineering teams on OT architecture and secure design.
• Evaluate emerging OT security technologies and help shape the long-term architecture and capability roadmap.

Requirements

• A bachelor's or master's degree in cybersecurity, computer science, computer or electrical engineering, information technology or a related field, or equivalent experience.
• 8+ years in cybersecurity, OT/ICS security, product security, network security, systems engineering or a related area, including designing or assessing OT cybersecurity architectures.
• Hands-on experience in industrial automation, robotics, warehouse automation, manufacturing, control systems or other OT settings.
• Solid grasp of OT/ICS architecture, industrial networks, PLCs, HMIs, SCADA, robotics, segmentation, firewalls, VPNs and secure remote access.
• Experience applying security principles across complex hardware, software and integrated systems.
• Knowledge of vulnerability management, penetration testing, threat modeling, security monitoring and risk-based remediation in OT environments.
• Working knowledge of networking, Windows and Linux, cloud environments and scripting or automation in Python or PowerShell.
• Knowledge of IEC 62443, NIST CSF, NIST SP 800-82, ISO 27001 and/or regulations such as the EU CRA.
• Ability to turn cyber risks and regulatory demands into practical architecture, engineering requirements and controls.
• Strong communication, technical writing, consulting and stakeholder management skills.
• Able to influence technical decisions across engineering and business teams without direct authority.
• Comfortable working in highly collaborative teams.
• Quick to learn.
• Highly motivated, energetic and persistent about quality and results that benefit the team, the organization and the community.
• Preferred certifications: CISSP, GICSP, GRID, GCIP, Security+, Network+, ISA/IEC 62443 (IC32/IC33) or equivalent.
• Able to travel occasionally to customer sites and company facilities.
• Works as an individual contributor and can take a lead role in supporting the team.
• You must be authorized to work in the U.S. without needing current or future sponsorship.

Conditions

Hybrid role that requires living near one of the U.S. offices in Grand Rapids, MI, Atlanta, GA or Plano, TX.

The estimated base pay range at posting is $147,600 to $184,500. Final pay depends on factors such as work location, education, experience, knowledge and skills.

The equal opportunity policy covers all employment terms, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Benefits

• Opportunities for career development.
• Pay and benefits that are competitive.
• Transparent pay practices.
• Global opportunities.