All roles

OT Security Engineer (IEC 62443)

Design defensive architectures for production plants, water utilities and energy sites. You apply IEC 62443 to zones, conduits and system requirements, and you work on site with operations engineers.

Apply nowTakes about 3 minutes

About the role

Plants and utilities are connecting control systems to enterprise networks and cloud services, often faster than their security design can keep up. Our OT team helps operators close that gap without stopping production. You assess existing installations, define zones and conduits, and specify security requirements for new systems and suppliers. You work with process and automation engineers on the client side, and with our network, governance and incident response colleagues. Site visits across southern Germany and Austria are part of the job.

What you will do

  • Run OT security risk assessments following IEC 62443-3-2 and document target security levels
  • Design zone and conduit models, segmentation and secure remote access for plant networks
  • Specify security requirements for system integrators and component suppliers using IEC 62443-3-3 and 4-2
  • Advise on asset inventory, passive network monitoring and patch processes suited to production constraints
  • Support clients in aligning OT measures with NIS2 and KRITIS obligations

What you bring

  • 3+ years in industrial automation, process control or OT security
  • Good knowledge of IEC 62443 and industrial protocols such as PROFINET, Modbus or OPC UA
  • Understanding of PLC, SCADA and DCS architectures from at least one major vendor
  • Degree in electrical engineering, automation, computer science or a comparable field
  • Willingness to travel to plant sites, typically a few days per month

Good to have

  • IEC 62443 certification (ISA/IEC 62443 Cybersecurity Fundamentals or Expert)
  • Experience in water, energy or chemical sector environments
  • Driving licence class B

Languages

English (C1), German (B2)

Skills

  • IEC 62443
  • OT security
  • Network segmentation
  • PROFINET
  • OPC UA
  • SCADA
  • Risk assessment