Industrial Cyber Security Architect (m/f/d)

Liebherr; España; Presencial; EUR 85.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Meal vouchers

Life and accident insurance

Private health insurance option

Flexible remuneration

Hybrid working model

Descripción de la vacante

Liebherr IT Shared Service Centre Ibérica in Madrid is seeking an Industrial Cyber Security Architect (m/f/d) to serve as the technical authority for OT security architecture across Liebherr's global OT environment. You will own the ICS blueprint, shape the reference architecture, and review site designs before production begins.

This role requires 5+ years in OT/ICS security, deep knowledge of OT protocols and the Purdue model, IEC 62443 experience, and travel up to 25%.

Formación

• 5+ years in OT/ICS security or industrial network engineering.
• Deep knowledge of OT protocols (IEC 60870/61850, Modbus, DNP3, PROFINET, EtherNet/IP, OPC-UA, BACnet).
• Experience designing OT network architecture using Purdue model.
• Familiarity with IEC 62443 and applying it to production environments.
• Proven OT security assessment experience.

Responsabilidades

• Own and maintain the Liebherr ICS Blueprint and OT security architecture.
• Review and approve site OT network designs before production starts.
• Lead site assessments, risk prioritization and remediation planning.
• Provide architecture leadership for Safe, scalable tooling deployment across multi-site environments.
• Collaborate across Global SOC, Network Security, GRC, Cloud and IAM.

Conocimientos

OT/ICS security

Industrial networks

Purdue model design

IEC 62443 knowledge

IEC 60870/61850

Modbus

DNP3

PROFINET

OPC-UA

BACnet

OT security assessments

Descripción del empleo

Liebherr's Corporate Information Security function is building a dedicated Industrial Cyber Security (ICS) domain to protect OT environments across nine production divisions and a global logistics network.

We are seeking an Industrial Cyber Security Architect (m/f/d) to be the technical authority for OT security architecture across the Liebherr Group. You will own Liebherr's ICS Blueprint, shape the Global OT reference architecture and governance, define OT network design standards, review and approve site architecture before production commences, and drive the technical execution across the ICS service portfolio, rather than a generalist advisory role.

You will work within the Cyber Security Consulting domain alongside the Head of Industrial Cyber Security, the ICS service leads, and regional ICS Specialists, with close collaboration across Cybersecurity domains (Global SOC, Network Security, GRC, Cloud and IAM).

The working location for this position will be in Madrid city, where we operate a hybrid model, requiring at least 40% of the working time on‑site.

Creating passion: your responsibilities

Architecture & Design Authority

• Own and maintain the Liebherr ICS Blueprint: the binding technical standard for OT network architecture, segmentation, and hardening across all production sites.
• Review and approve high‑level and low‑level OT network designs for all new sites.
• Lead site assessments, risk prioritization, and structured remediation planning.
• Evaluate OEM and vendor network architectures before integration.
• Govern OT segmentation design in close collaboration with Network Security.

Secure Digital Factory Service

• Act as the principal technical authority for the Secure Digital Factory service.
• Define OT security specifications for new procurement.
• Support transformational OT Security projects with architecture leadership for safe, scalable tooling deployment across multi‑site environments.

Standards, Governance & Cross‑Domain Collaboration

• Ensure all OT security architectures align with IEC 62443, NIST CSF 2.0, NIS2, CRA, and applicable sector‑specific frameworks.
• Provide technical guidance to Liebherr's regional ICS Specialists for site‑level engagement and implementation oversight.

Contributing your strengths: your qualifications

• 5+ years of experience in OT/ICS security or industrial network engineering, with hands‑on work in production or manufacturing environments.
• Deep practical knowledge of OT protocols and environments: IEC 60870/61850, Modbus, DNP3, PROFINET, EtherNet/IP, OPC‑UA, BACnet.
• Proven experience designing OT network architecture using the Purdue model: zone/conduit design, IT/OT segmentation, industrial DMZ patterns, and firewall placement.
• Working knowledge of IEC 62443 and its application to real production environments: security levels, system requirements, component hardening.
• Experience conducting OT security assessments.
• Clear written and verbal communication; able to produce architecture documentation and present technical decisions to both engineers and senior stakeholders.
• Willingness and ability to travel to Liebherr sites worldwide up to 25% of the time (majority of sites in Central Europe).

Our commitment to you: your benefits

• Competitive compensation and benefits package that recognizes your expertise.
• Flexible and hybrid working model.
• Creative freedom and responsibility to shape processes and solutions in our global transformation.
• Continuous learning and development with tailored training and certification opportunities.
• Meal vouchers.
• Life and accident insurance.
• Option to include a premium private health insurance package as part of the flexible remuneration.
• A safe, stable and international workplace within a trusted family business that invests in people.

Location

Liebherr IT Shared Service Centre Ibérica, S.L.
Parque Norte. Alamo building Serrano Galvache, 56
28033 Madrid
Spain (ES)

Contact

Karoliina Rissanen
[e-mail]