OT Security Engineer — 6–12 Month Contract

OT Security Engineer — 6–12 Month Contract

Confidential manufacturing client | Remote when not onsite | 30–50% travel | Travel expenses covered

We are supporting a confidential manufacturing client on a hands-on OT security remediation program across multiple production sites.

This is not a pen testing role. This is plant-level OT security work: asset validation, patching, endpoint/security agent deployment, firmware validation, compensating controls, and production-safe remediation.

What you will do

• Work directly with plant, controls, OT, and security teams
• Validate OT assets, operating systems, firmware, applications, and data flows
• Support remediation across IPCs, HMIs, PLCs, drives, IO modules, servers, and related OT systems
• Assist with endpoint protection / security agent deployment in OT environments
• Support patching, firmware validation, rollback planning, and compensating controls
• Help with segmentation, NAC, firewalls, remote access, and network communication review
• Document findings, deployment status, issues, exceptions, and remediation progress
• Help ensure security changes do not disrupt production or safety controls

What we are looking for

• 5+ years working with OT, ICS, controls, automation, or manufacturing systems
• Plant / production environment experience
• Understanding of PLCs, HMIs, SCADA, drives, firmware, and safety/control impacts
• Exposure to OT security, endpoint protection, patching, segmentation, NAC, firewalls, or vulnerability remediation
• Ability to work shoulder-to-shoulder with local plant and controls teams
• Comfortable with 30–50% travel

Nice to have

• CrowdStrike/Falcon, Cortex, Defender, Claroty, Nozomi, Tenable.ot, Dragos, Splunk, or similar tools
• IEC 62443, NIST 800-82, MITRE ATT&CK for ICS, or related OT security frameworks
• Experience supporting OT remediation, patching, firmware upgrades, or security-agent deployment

This is a strong fit for someone who understands the difference between “technically correct” and “safe to execute in production.”