OT Cybersecurity Engineer

Applied Control Engineering, Inc. (ACE) is seeking an OT Cybersecurity Engineer to serve as a trusted technical advisor to customers. The role involves contributing to the design, deployment, and hardening of OT networks and systems, driving projects from kickoff to close-out, supporting junior engineers, and building and securing servers and networks for industrial control systems. ACE provides automation solutions to industries including chemicals, pharmaceuticals, industrial gases, and discrete manufactured products. The position is in the Project Delivery department.

Responsibilities

Architect, deploy, and document OT network infrastructure (switches, routers, firewalls, VLANs, DMZs) and Windows server environments that support industrial control systems; Implement cybersecurity controls (intrusion detection/prevention, endpoint hardening, network segmentation, secure remote access) aligned with IEC 62443 and NIST CSF; Build and maintain Windows environments, including Active Directory, Group Policy, and WSUS patch management; Conduct OT network and asset assessments and deliver prioritized remediation roadmaps; Translate complex risk findings into clear narratives for plant-floor operators and executive stakeholders; Recommend and right-size security solutions that balance operational uptime with cybersecurity best practices; Work on cross-office and cross-discipline project teams; Mentor junior engineers on OT security principles, network design, and professional development; Collaborate with project managers to track project statuses and ensure customer satisfaction

Requirements

3+ years of hands-on experience in industrial networking, system administration in an industrial environment, or a closely related discipline; Demonstrated expertise with Windows Server, Active Directory, Group Policy, and patching workflows; Virtualization experience (VMware, Hyper-V); Strong working knowledge of managed switches, routers, and firewalls (Cisco, Fortinet, Palo Alto, or equivalent), comfortable with both CLI and GUI configuration; Experience designing and implementing network segmentation, firewall rule sets, and secure architectures in industrial settings; Familiarity with OT security frameworks and standards (IEC 62443, NIST SP 800-82, or similar); Familiarity with process control or other manufacturing processes; Proven experience in delivering projects to success conclusion; Ability to handle a project through its entire lifecycle; Strong written and oral communication skills; Thorough knowledge of business application software (MS Office package); Displays a positive and professional demeanor; Demonstrates a flexible and cooperative working style; Willing to work off-hours when required; Must possess a valid driver's license; Willing to submit to drug testing and/or background checks

Nice to have

Bachelor's (or higher) degree in Chemical, Electrical, Mechanical, Robotics, Bioengineering, Industrial, or Computer Engineering, or Computer Science; Industry certifications: GICSP, ISA/IEC 62443 Cybersecurity Certificate, CISSP, CCNA/CCNP, or equivalent; Direct experience with industrial control systems (DCS, PLC/HMI, SCADA) in manufacturing, utilities, or energy; Hands-on exposure to OT-specific security tools such as Claroty, Nozomi Networks, Dragos, or Tenable.ot

Benefits

Comprehensive and attractive benefits package; Professional development opportunities within all departments; Opportunities for advancement into senior leadership, technical leadership, project management, sales, and engineering management