Lead Engineer, Manufacturing Security
Posted 2hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Lead OT network segmentation, firewall, and DMZ projects for Danaher’s global life sciences manufacturing operations. Serve as senior technical resource across multiple operating companies and sites.
Responsibilities:
- Serve as the senior OT security technical resource and primary DIS engineering point of contact for assigned platform operating companies
- Build relationships with OpCo CIOs, IT leads, and plant engineers to translate DIS architecture standards into implementation plans
- Translate enterprise OT architecture blueprints into engineering designs covering firewall policy, VLAN topology, DMZ architecture, access control rules, and compensating controls
- Drive network segmentation, firewall deployment, and DMZ build projects through production cutover
- Partner with OT Site Engineers and network teams during change-window execution
- Lead or provide on-site/on-call technical support during cutover while protecting production operations, batch processes, and automated manufacturing systems
- Contribute to deployment of OT remote access controls, replacing legacy VPNs, direct-vendor connections, and consumer-grade remote tools
- Build and maintain the OT Security engineering knowledge base, including architecture decisions, implementation playbooks, deviation rationales, and as-built network diagrams
Requirements:
- Strong hands-on experience designing and implementing OT network segmentation in live industrial environments, including VLAN architecture, industrial firewall configuration (Fortinet, Palo Alto, Cisco, or equivalent), DMZ build, and zone-based access controls across multi-site manufacturing operations
- Demonstrated ability to lead OT network change projects in production-sensitive environments
- Deep familiarity with OT/ICS components and network dependencies, including PLCs, DCS, SCADA, HMI, historian, and BMS systems
- Knowledge of Modbus, Profinet, EtherNet/IP, OPC-UA, and BACnet protocols
- Working knowledge of IEC 62443, NIST SP 800-82, and ISA-99 standards
- Hands-on experience applying security frameworks to remediate audit findings at manufacturing sites
- 10+ years of experience in OT/ICS security engineering or industrial network engineering
- Significant experience leading segmentation, firewall deployment, or OT infrastructure projects at multiple manufacturing sites simultaneously
- Ability to travel 25%
Benefits:
- Health care program
- Paid time off
- Medical insurance
- Dental insurance
- Vision insurance
- 401(k)
- Bonus/incentive pay
- Flexible, remote working arrangement
- Remote work from home













