OT Security Architect

Bloom Energy - Newark, DE

Hiring: OT Security Architect Company: Bloom Energy Location: Newark, DE Job Posted Time: 2026-09-16 23:35:19 Employment Type: Remote Target Skills & Keywords : Configuration Management, Linux, Manufacturing Execution Systems, PLC, PowerShell, Python, SCADA, SIEM, VPN About the job Experience: •8+ years of cyber security, network, or infrastructure engineering experience, including 4+ years hands-on OT/ICS cyber security in production industrial or manufacturing environments. •Demonstrated hands-on deployment and operation of OT security tooling at multiple sites. •Strategy-only, advisory-only, or assessment-only backgrounds will not be considered. •Secure Remote Access: brokered vendor and engineer access to Levels 0–3, session recording, MFA, jump hosts, browser isolation •Malware Scanning Kiosks: USB and vendor media inspection at plant entry points, scan engines, sanitization, and media workflows Required Skills: •Deploy, configure, and tune OT security platforms across manufacturing sites endpoint protection, inline IPS, asset discovery, secure remote access, media scanning kiosks, and PLC backup including rulesets, allowlists, exclusions, and detection tuning on production assets. •Design and implement IT/OT convergence controls: OT DMZ at Level 3.5, brokered access, data flows, identity and directory integration, patching paths, and monitoring feeds. •Implement defense-in-depth segmentation aligned to the Purdue model and ISA/IEC 62443 zone-and-conduit design, VLANs and rulesets, micro segmentation, and virtual patching for legacy assets partnering with Network Engineering on switching, routing, firewalls, wireless, IIoT, edge, and WAN. •Run OT asset discovery and integrate telemetry into enterprise SIEM, EDR/XDR, NDR, and vulnerability management; maintain inventory and drive end-of-life OS remediation. •Implement and test PLC/HMI backup, versioning, and golden-image recovery; support OT incident response and recovery, and lead POCs and production rollouts for new OT security technologies. Qualifications: •Own operational health of deployed tooling: agent coverage, sensor health, license utilization, upgrades, and version currency. •Bachelor’s degree in Cybersecurity, Computer Science, Electrical Engineering, Industrial Engineering, Computer Engineering, or a related technical discipline, or equivalent hands-on experience. Compensation: •Flexible work environment (work from home / hybrid options) Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!