Senior OT & Edge Engineer: Scale Secure OT/IoT in Food Tech

Vacatures Zaandam; Zaandam; On-site; EUR 90,000 - 112,000; Full time

Benefits offered by this job

Annual salary up to €106k including 휴?

32 days of paid leave

Job summary

Albert Heijn's AH Technology seeks a Senior OT & Edge Engineer to design and secure the OT/IoT landscape across 20+ DCs/HSCs and 1280+ stores. You’ll architect the OT Secure Ring, enable secure data flows, and build repeatable blueprints for OT/IoT assets.

You’ll work with mechanisation partners and application teams, deploying IaC/Config-as-Code, and advancing DevOps and observability in a large, hybrid environment.

Qualifications

• A bachelor's or master's degree in a technical or engineering direction.
• 5 years+ experience as an OT, IoT, Cloud, DevOps or Backend engineer in a complex (corporate) technology environment
• Strong experience with cloud infrastructure (Azure preferred)
• Solid understanding of networks and network security
• Experience with Infrastructure-as-Code and Config-as-Code (Terraform, Ansible, Pulumi, CDK) and DevOps tooling (GitHub, ArgoCD, Prometheus, Grafana, OpenTelemetry)
• Affinity with OT/ICS environments
• Experience with (or a strong drive to learn) OT security: IEC 62443, zoning and segmentation, industrial IDS, PAM and identity, SIEM integration
• Familiarity with industrial and IoT protocols and event-driven architectures: OPC-UA, Modbus, MQTT, OCPP, Kafka
• Experience with backend and APIs, containerised platforms and Kubernetes
• You use AI tooling as a natural part of your workflow, and you're curious where AI can strengthen engineering, operations and anomalydetection in OT
• A collaborative mindset: you work daily with mechanisation partners, suppliers, network engineers, Global Security
• Willingness to travel to our DCs and HSCs for commissioning, retrofits and troubleshooting
• Strong communicator in English and preferably in Dutch

Responsibilities

• Design the OT Secure Ring: zoning and segmentation based on the Purdue model and IEC 62443, industrial DMZ services, and secure conduits between IT, cloud and OT
• Translate that design into security requirements and network patterns, and work with our network engineers to get them implemented
• Build our central iDMZ and OT services in Azure, keeping the on-site footprint as small as possible, local only where autonomy or latency demands it
• Develop repeatable blueprints so any OT/IoT asset type can be connected, secured and monitored in a standardised way
• Work closely with our mechanisation partners (AutoStore, conveyor and sortation, SCADA, PLCs, WMS), they configure their stack; you ensure it lands securely
• Support and advise on integration patterns for OT data and events, initially alongside partners and application teams, increasingly building them yourself
• Deliver the iDMZ and connectivity for Industrial IDS and SIEM onboarding
• Build secure access with Privileged Access Management (CyberArk), Entra ID and jumpservers
• Set up visibility and lifecycle management: asset inventory, configuration, patching and vulnerability management
• Automate everything with infrastructure-as-code and config-as-code
• Deploy DevOps and observability tooling for CI/CD and end-to-end critical chain observability
• Share your knowledge and participate in projects within the product cluster and broader AHTechnology Platform
• Engage in ongoing learning and contribute to updates in key practices

Skills

OT Engineer

IoT Engineer

Cloud infrastructure

DevOps tooling

Kubernetes

OT security

Industrial protocols

English Dutch

Infra-as-Code

AI tooling

Education

Bachelor's or Master's in technical/engineering

Tools

Terraform

Ansible

Pulumi

CDK

GitHub

ArgoCD

Prometheus

Grafana

OpenTelemetry

Azure

Job description

Albert Heijn's AH Technology seeks a Senior OT & Edge Engineer to design and secure the OT/IoT landscape across 20+ DCs/HSCs and 1280+ stores. You’ll architect the OT Secure Ring, enable secure data flows, and build repeatable blueprints for OT/IoT assets.

You’ll work with mechanisation partners and application teams, deploying IaC/Config-as-Code, and advancing DevOps and observability in a large, hybrid environment.