layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

LAYIQ - OT Security Technical Lead at Crown Holdings

Engineering & Technical Leadership (40%): Develop and implement security controls for OT assets such as PLCs, RTUs, HMIs, engineering workstations, historians, SCADA systems, DCS platforms, and industrial network equipment.
Serve as the lead technical subject matter expert (SME) throughout the implementation of OT related security solutions and changes, including defining standard processes and authoring detailed technical guides to enable smooth transition to an operational state.
Function as a subject matter expert (SME) for Crown’s OT security solutions, helping ensure they are managed and maintained in accordance with Crown and industry standards and continue to meet current and future requirements.
Proactively identify OT related security configuration issues across the enterprise and coordinate timely remediation with minimal operational impact.
Help maintain accurate inventories of OT assets, including PLCs, RTUs, HMIs, engineering workstations, SCADA servers, and industrial network devices.
Participate in OT incident response, including triage, containment, recovery, root-cause analysis, and lessons-learned activities.
Perform vulnerability assessments and support remediation planning for OT systems, considering operational uptime, safety, vendor guidance, and maintenance windows.
Strategy and Architecture Design (30%): Define and maintain the target OT cybersecurity architecture, roadmap, standards, and reference designs.
Work with the Network Security Architect to design secure network segmentation and zoning strategies for industrial environments, aligned with the Purdue Model, ISA-95, and ISA/IEC 62443 principles.
Conduct OT security architecture reviews, threat modeling, risk assessments, and security gap analyses.
Identify, assess, and select global OT security related solutions and changes that improve Crown’s OT cybersecurity posture across its global operations.
Produce detailed designs and implementation plans to ensure new OT security solutions and changes are robust, resilient, and well integrated into Crown’s environment while minimizing operational impact.
Stakeholder Collaboration and Consulting (30%): Work with regional IT teams, plant engineers and operators to ensure security controls are feasible, maintainable, and do not compromise production or safety.
Support other projects and initiatives to ensure OT related components and changes are securely configured and in line with Crown security standards.

Crown seeks an experienced and driven OT Security Technical Lead to drive improvement in Crown’s overall OT security by designing and engineering resilient, secure solutions and controls and coordinating their implementation across its global manufacturing environment.
Technical Expertise: 5+ years of experience in OT/ICS engineering, industrial automation, cybersecurity or a related field.
Experience of designing and/or implementing security controls/solutions for OT, industrial control systems or components (PLC, HMI, SCADA etc)
Strong practical understanding of industrial control systems and communications protocols, including EtherNet/IP, CIP, S7 communication, Modbus, DNP3, OPC Classic/OPC UA, PROFINET, and BACnet.
Proficient in OT network architecture and security controls, including network segmentation, firewalls, industrial DMZs, secure remote access, and secure communications.
Demonstrated ability to identify, assess, and remediate OT related security risks, vulnerabilities, and configuration weaknesses.
Hands-on experience with OT security platforms such as Nozomi Networks, Claroty, Dragos, Microsoft Defender for IoT, Tenable OT, or comparable technologies.
Familiarity with major industrial automation vendors and technologies, including Siemens, Rockwell Automation, Schneider Electric, Honeywell, Emerson and GE.
Experience serving as a technical lead on large-scale projects involving geographically distributed and cross-cultural teams.
Demonstrated experience defining and implementing security standards, processes, and governance within large corporate IT environments.
Working knowledge of OT security frameworks and standards, including ISA/IEC 62443, NIST SP 800-82, and the Purdue Enterprise Reference Architecture (PERA).
Core Competencies: Strategic thinker; understands complex business needs and translates them into secure, technically sound, actionable plans.
Quality driven and detail oriented, with advanced problem solving and troubleshooting skills.
Strong organizational and prioritization skills; effectively manages competing tasks and consistently meets project deadlines.
Excellent communication skills; translates technical concepts for diverse audiences and influences technical stakeholders through evidence-based recommendations.
Proactive and self-directed; anticipates risks, identifies opportunities for improvement, and takes timely action to resolve issues before they affect delivery or security outcomes.
Personable and relationship-focused; builds trusted, productive working relationships across teams, stakeholders, countries, and cultures to enable effective collaboration and shared outcomes.
Education & Certifications: Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or equivalent experience.
Preferred certifications: GICSP, GRID, ISA/IEC 62443 Cybersecurity Expert or similar.
TOGAF certification would also be desirable.

OT Security Technical Lead

Employer job description

About Crown

Job Description:

About the Company

About the Team

About the Position

Responsibilities

Requirements

What Crown Offers You

About this listing

Listing check

Similar jobs

Similar jobs