OT Security Engineer

AG Solution Group; Barcelona; On-site; EUR 60,000 - 90,000; Full time

Job summary

AG Solution is seeking an OT Security Specialist to strengthen industrial network security, focusing on risk assessment, segmentation, and secure architecture. You will collaborate with operations, IT, and engineering teams to implement robust protective measures across OT environments.

The role requires hands-on experience with OT firewalls, monitoring, and Purdue-model-informed design, with strong communication in Spanish and English and willingness to travel for site engagements.

Qualifications

• Experience securing OT networks in industrial environments.
• Ability to assess risks and design mitigation strategies.
• Strong understanding of network segmentation and Purdue model.
• Experience with OT firewalls and monitoring tools.
• Ability to work with IT/OT teams across projects.

Responsibilities

• Assess OT security posture and develop risk-based improvements.
• Coordinate with operations, IT, and engineering teams.
• Implement network segmentation and secure architecture principles.
• Configure and maintain OT firewalls and monitoring solutions.
• Engage with clients and present clear security recommendations.

Skills

OT security in industrial environments

Network segmentation

Risk assessments & mitigation

Cross-functional collaboration

Threat monitoring & analytics

Purdue model understanding

AD management

Tools

Fortinet firewall configurations

Nozomi Guardian

Cisco certifications

Palo Alto firewall configuration

Active Directory management

OT network redesign & IP numbering

Job description

A proactive and detail-oriented OT Security Specialist with a strong analytical mindset and practical/hands-on experience in securing industrial environments. This professional excels at understanding and managing complex and legacy OT infrastructures, and is able to advocate efficient and transparent solutions ensuring they become secure.

With foundational expertise in OT network technologies and firewall configurations, this specialist can cooperate with other teams—such as operations, IT, and engineering—to assess risks, strengthen network segmentation, and maintain a resilient OT security posture.

Key Strengths:

• In-depth knowledge of OT security and networking in industrial environments (e.g., SCADA, PLCs, DCS)
• Skilled in analyzing and mapping complex or legacy OT networks
• Hands-on experience with segmentation and IP (re-)numbering of OT networks
• Experienced with risk assessments and developing mitigation strategies
• Practical understanding of firewalls, network segmentation, and secure architecture principles
• Understanding of the Purdue model
• Hands-on experience in implementation of at least one of the following technologies (OT-firewalling, automated network monitoring, network restructuring)
• Proficient in continuous monitoring using SNMP, NetFlow, or similar protocols
• Works cross-functionally with IT/OT teams to align security with production needs
• Knowledge of Fortinet firewalls configuration
• Experience with Active Directory (AD) management
• Hands-on experience with Nozomi Networks solutions (e.g., Guardian) for network traffic analysis, anomaly detection, and asset visibility in industrial/OT environments is a plus
• Cisco certificate is a plus
• Palo Alto firewall configuration is a plus

Communication & Client Engagement

• Strong verbal and written communication skills, able to translate complex OT security concepts into clear, business-relevant language for both technical and non-technical stakeholders.
• Proactive in client meetings, takes initiative during commissioning, testing, and audit phases to flag risks early, propose solutions, and keep stakeholders aligned rather than waiting to be asked.
• Confident representing the company in front of client teams on-site, building trust and credibility through transparent, solution-oriented dialogue.
• Comfortable working cross-culturally and adapting communication style to different client organizations during international travel.

Travel required to customer sites during key project phases (e.g., commissioning, testing, audits). Flexibility for short-term international travel is essential

Language: Excellent communication skills in Spanish and English are required; French is a strong asset.

Location: Preferred location is Barcelona or the surrounding area

Join AG Solution Where Talent Shapes Industry 4.0

At AG Solution, we build intelligent solutions for the process industry, combining automation, process control, data management, and MES/MOM systems to help manufacturers reach operational excellence.

Now part of the Quariq Group, we are one of Europe’s leading Industry 4.0 partners, with more than 400 engineers and consultants working across Europe, the UK, and the US.

Driven by People. Powered by Technology.

Our success starts with our people. We invest in growth through continuous learning, mentorship, and our AG Academy, ensuring every colleague has the opportunity to develop their skills and career.

We believe that innovation happens when people feel trusted, connected, and inspired.

A Global Team with a Human Touch

With offices in over 15 cities worldwide, we bring together diverse expertise and perspectives — from Antwerp to Barcelona, Rotterdam to Lyon, and New York to Krakow.

At AG Solution, you’ll work on meaningful projects that drive efficiency, sustainability, and digital transformation for leading manufacturers worldwide.

Built to Scale. Driven by Talent.

Ready to shape the future of industry?
Explore our opportunities and grow with a team that’s redefining what’s possible.