Cybersecurity or network infrastructure with OT/ICS environments
Location: Maple Grove/Arden Hills
Duration: 6 months
PLEASE ENSURE THAT YOU INPUT SUPPLIER COMMENTS AS TO WHY YOU FEEL YOUR CANDIDATE IS A GOOD FIT. THIS IS A REQUIREMENT AND WILL BE REJECTED IF THIS INFORMATION IS NOT PROVIDED.
7+ Years of experience in Assurance for Internet of Things (IoT)
10+ years of experience in cybersecurity or network infrastructure, with 5+ years specifically focused on OT/ICS environments in manufacturing or critical infrastructure.
Required Skills & Experience:
• Proven leader with a strong background in OT cybersecurity architecture and execution, capable of designing and driving implementation of complex, multi-site solutions in manufacturing environments.
• Strong foundation in network engineering and infrastructure, with experience in network design, segmentation, and secure architecture—especially in hybrid IT/OT environments.
• Delivered full lifecycle solutions including:
o Secure remote access
o Network and OT segmentation (macro and micro)
o OT IDMZ design and deployment
o Proxy integrations
o Legacy asset protection and internet restriction policies
• Hands-on experience with OT security platforms such as Claroty, Nozomi, or Ordr, integrated with NAC (Aruba or Cisco), firewalls, and identity-based controls.
• Deep experience in infrastructure implementation, including routing, switching, and zoning technologies within modern and legacy manufacturing networks.
• Expertise in domain architecture best practices for OT, including designing isolated OT domains, proper Active Directory (AD) trust models, and secure domain controller (DC) placement and hardening strategies.
• Experience addressing domain controller patching challenges in OT environments, including:
o Developing segmentation strategies to isolate legacy systems from fully patched domain controllers
o Designing dedicated legacy-supporting domain controllers with restricted access
o Aligning firewall rules, DNS, and authentication flows to reduce risk from unpatched or constrained systems
• Skilled in developing and enforcing zoning and segmentation strategies, aligned with ISA/IEC 62443, NIST CSF, and the Purdue Model.
• Strong ability to coordinate across global sites, driving standardization of architecture, tooling, and governance.
• A vocal and assertive leader who can influence decisions, rally teams, and gain alignment across cybersecurity, IT, OT, and operations stakeholders.
• Excellent communicator with the ability to document strategy and architecture clearly and drive adoption from the boardroom to the plant floor.
• Demonstrated ability to manage technical debt, balance operational risk, and deliver scalable, resilient security solutions in production environments.
Experience & Qualifications:
• 10+ years of experience in cybersecurity or network infrastructure, with 5+ years specifically focused on OT/ICS environments in manufacturing or critical infrastructure.
• Proven track record in network and OT architecture design, and leading the implementation of global OT cybersecurity programs.
• Experience working with complex, legacy-heavy environments, enforcing segmentation, secure access, IDMZ, and governance across diverse manufacturing sites.
Preferred Certifications (Bonus, Not Required):
• Global Industrial Cyber Security Professional (GICSP)
• ISA/IEC 62443 Cybersecurity Certificate
• Certified Information Systems Security Professional (CISSP)
• Certified SCADA Security Architect (CSSA) or Industrial Cybersecurity Professional (IC32)
• TOGAF or other enterprise architecture certifications
• Cisco (CCNP/CCIE) or Aruba certifications a plus for networking depth
• Microsoft Certified: Windows Server Hybrid Administrator Associate or similar (for domain controller relevance)
Education:
• Bachelor’s degree in Cybersecurity, Networking, Engineering, or Computer Science (Master’s degree a plus)
Never miss an opportunity! Create an alert based on the job you applied for.
