Industrial OT Security Engineer: Mastering OT Networks & Risk

AG Solution Group; Houston (TX); On-site; USD 110,000 - 170,000; Full time

Job summary

AG Solution Group is seeking an OT Security Engineer to protect industrial environments, including SCADA, PLCs, and DCS, by applying segmentation, threat modelling, and hands-on firewall configurations.

The role collaborates with operations, IT, and engineering to assess risk, strengthen security posture, and support commissioning, testing, and audits. Travel to customer sites will be required, with a focus on delivering secure, reliable systems.

Qualifications

• Experience securing industrial OT environments (SCADA, PLCs, DCS) and managing legacy OT infrastructure.
• Ability to map complex OT networks and implement segmentation.
• Experience with risk assessments and mitigation strategies for OT networks.
• Knowledge of Purdue model and secure architecture principles.
• Hands-on experience with OT firewalling or network monitoring.
• Proficient in SNMP or NetFlow for continuous monitoring.

Responsibilities

• Translate OT security concepts into business terms for stakeholders.
• Collaborate with IT/OT teams during commissioning, testing, and audits.
• Engage with clients on-site and drive risk mitigation plans.
• Travel for project phases as needed.

Skills

OT security

Industrial networking

SCADA/PLC/DCS security

Network segmentation

Risk assessments

Firewall configurations

SNMP/NetFlow monitoring

Cross-functional collaboration

English communication

International travel

Tools

Fortinet firewall configurations

Nozomi Guardian

Cisco certificate

Palo Alto firewall configurations

Job description

AG Solution Group is seeking an OT Security Engineer to protect industrial environments, including SCADA, PLCs, and DCS, by applying segmentation, threat modelling, and hands-on firewall configurations.

The role collaborates with operations, IT, and engineering to assess risk, strengthen security posture, and support commissioning, testing, and audits. Travel to customer sites will be required, with a focus on delivering secure, reliable systems.