Sr OT Cybersecurity Engineer (ICS / Mfg)

BCTG’s direct manufacturing client is seeking a Senior OT Cybersecurity Engineer (ICS / Manufacturing) to support the implementation and execution of a global Operational Technology (OT) cybersecurity program across multiple manufacturing facilities.

This role will work closely with OT Security Architects, cybersecurity teams, manufacturing sites, controls engineers, and plant operations teams to assess, deploy, validate, and maintain cybersecurity solutions within industrial environments.

The ideal candidate will have hands-on experience supporting OT/ICS environments and understand the unique challenges of securing manufacturing systems while maintaining production uptime and operational reliability.

This position will be responsible for technical execution of OT security initiatives including asset validation, endpoint security deployments, vulnerability remediation, patch management, firmware upgrades, security tooling implementation, and system validation.

Key Responsibilities

OT Environment Assessment & Asset Validation

• Perform OT asset discovery and validation activities across manufacturing environments.
• Validate industrial assets including:Industrial PCs (IPCs)
• Servers
• HMIs
• PLCs
• Drives
• IO modules
• Embedded systems
• Document hardware, operating systems, software versions, configurations, and dependencies.
• Validate Windows operating systems, including legacy environments such as:Windows XP
• Windows 7
• Windows 10
• Windows Server environments
• Perform application mapping and identify critical ICS/SCADA applications including:Wonderware
• Ignition
• FactoryTalk
• Other industrial automation platforms

OT Security Tool Deployment

• Support deployment of OT cybersecurity solutions across manufacturing assets.
• Execute endpoint security deployments while minimizing impact to production systems.
• Support technologies such as:CrowdStrike Falcon
• Microsoft Defender for Endpoint
• Claroty
• Tenable
• Cortex XDR
• Other OT security platforms
• Validate security agent compatibility with industrial applications and systems.
• Configure or support exclusions, exceptions, and compensating controls as required.
• Troubleshoot deployment issues and recommend remediation approaches.

OT Patch Management & Vulnerability Remediation

• Support OT vulnerability remediation activities.
• Apply approved operating system patches and security updates.
• Support patch management processes using tools such as WSUS or similar technologies.
• Validate patch compatibility with manufacturing applications and industrial systems.
• Support firmware upgrades for:PLCs
• HMIs
• Drives
• IO modules
• Embedded operating systems
• Implement compensating controls when vulnerabilities cannot be directly remediated.

Manufacturing System Validation & Troubleshooting

• Perform functional testing after security changes are implemented.
• Validate that:HMIs continue communicating with PLCs.
• Industrial applications function correctly.
• Manufacturing processes are not impacted.
• Security controls are operating as expected.
• Capture baseline and post-change performance metrics.
• Support rollback procedures when changes impact system functionality.
• Troubleshoot OT security deployments while maintaining production requirements.

OT Network & Security Support

• Validate OT network connections and communication requirements.
• Support review of industrial network topology.
• Ensure security controls do not disrupt required industrial protocols.
• Assist with OT asset visibility and vulnerability management initiatives.
• Partner with OT Security Architects on technical recommendations.

Documentation & Reporting

• Maintain accurate documentation including:Asset inventories
• Deployment records
• Security configurations
• Patch records
• Issues and resolutions
• Validation results
• Exception documentation
• Provide technical updates to OT Security leadership and project teams.

Required Qualifications

• 5+ years of cybersecurity, infrastructure, controls, or industrial technology experience.
• Hands-on experience supporting Operational Technology (OT), Industrial Control Systems (ICS), or manufacturing environments.
• Strong understanding of industrial automation environments including:PLCs
• HMIs
• SCADA systems
• Industrial PCs
• Manufacturing networks
• Experience implementing cybersecurity solutions within production environments.
• Experience with OT security technologies, endpoint protection, vulnerability management, or asset discovery tools.
• Experience performing:Asset assessments
• Security deployments
• Patch management
• Vulnerability remediation
• Technical troubleshooting
• Ability to work with plant personnel, controls engineers, and technical teams.
• Strong troubleshooting and problem-solving skills.
• Ability to work independently in a manufacturing environment.

Preferred Qualifications

• Experience with OT cybersecurity tools including:CrowdStrike Falcon
• Claroty
• Tenable
• Microsoft Defender
• Cortex XDR
• Experience deploying security agents in manufacturing environments.
• Experience supporting:Windows legacy systems
• Industrial applications
• SCADA platforms
• Factory automation systems
• Experience with:IEC 62443
• NIST Cybersecurity Framework
• Purdue Model
• Industrial network segmentation
• Experience in regulated manufacturing environments:Pharmaceutical
• Life Sciences
• Medical Device
• Food & Beverage
• Industrial Manufacturing
• Cybersecurity certifications preferred:Security+
• CISSP
• GICSP
• ISA/IEC 62443
• GIAC certifications

Travel Requirements

• Ability and willingness to travel periodically to manufacturing sites.
• Travel may be required to support onsite assessments, deployments, troubleshooting, and validation activities.

Ideal Background

The ideal candidate is a hands-on OT cybersecurity professional who understands both cybersecurity and manufacturing operations.

They have experience securing industrial environments, deploying security solutions, troubleshooting production-impacting issues, and partnering with plant teams to implement cybersecurity improvements without disrupting operations.

This person is comfortable working directly with industrial systems and understands that OT security requires balancing risk reduction with safety, reliability, and production uptime.