Lead OT Product Security Architect

Dematic; Grand Rapids (MI); Hybrid; USD 148,000 - 185,000; Full time

Benefits offered by this job

Career Development

Competitive Compensation and Benefits

Pay Transparency

Global Opportunities

Job summary

Dematic is seeking a Principal OT Product Security Architect to lead security architecture across OT/ICS for Dematic products and solutions. You will define secure networks, lead design reviews, and drive secure-by-design and DevSecOps in product lifecycles to protect customer operations.

You will translate standards into technical requirements and mentor teams to advance OT cybersecurity maturity. Hybrid role near US offices with occasional travel; you will collaborate with Product Management,

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, Information Technology, or related field, or equivalent experience.
• 8+ years of cybersecurity, OT/ICS security, product security, network security, systems engineering, or related experience, with demonstrated experience designing or assessing OT cybersecurity architectures.
• Experience with industrial automation, robotics, warehouse automation, manufacturing, control systems, or other OT environments.
• Strong understanding of OT/ICS architecture, industrial networks, PLCs, HMIs, SCADA, robotics, segmentation, firewalls, VPNs, and secure remote access.
• Experience applying cybersecurity principles across complex hardware, software, and integrated systems.
• Knowledge of vulnerability management, penetration testing, threat modeling, security monitoring, and risk-based remediation in OT environments.
• Working knowledge of networking, Windows/Linux, cloud environments, and scripting/automation such as Python or PowerShell.
• Knowledge of IEC 62443, NIST CSF, NIST SP 800-82, ISO 27001, and/or applicable regulatory requirements such as the EU CRA.

Responsibilities

• Define and maintain OT cybersecurity architecture, requirements, standards, and reference architectures for Dematic products and solutions.
• Lead security architecture and technical design reviews across OT, software, controls, networking, and cloud environments.
• Define secure network architectures, including segmentation, zones/conduits, firewalls, industrial DMZs, secure remote access, and OT-to-cloud connectivity.
• Integrate secure-by-design and DevSecOps principles into product and system development lifecycles.
• Define cybersecurity requirements for products, systems, software, embedded components, and customer deployments.
• Lead or support threat modeling, attack-surface assessments, vulnerability assessments, penetration testing, and security architecture assessments.
• Establish risk-based approaches for OT vulnerability remediation, including compensating controls where patching may impact safety, availability, reliability, or operations.
• Define requirements for OT security monitoring and platforms and their integration with customer SOC/SIEM/MDR environments.
• Translate applicable cybersecurity standards and regulations into technical requirements, including IEC 62443, NIST CSF, NIST SP 800-82, ISO 27001, and EU Cyber Resilience Act (CRA).
• Support product certification, conformity assessments, audits, customer security reviews, and cybersecurity evidence development.
• Perform and support OT cybersecurity assessments of Dematic and customer environments and provide practical remediation strategies.
• Partner with Engineering, Product Security, Infrastructure, and Operations teams to develop secure architectures throughout the product lifecycle.
• Provide technical expertise during OT cybersecurity incidents and support secure recovery and resilience strategies.
• Mentor cybersecurity, software, controls, and engineering teams on OT cybersecurity architecture and secure design practices.
• Evaluate emerging OT cybersecurity technologies and contribute to Dematic's long-term OT cybersecurity architecture and capability roadmap.

Skills

OT/ICS security

Security architecture

Threat modeling

Vulnerability management

Networking basics

Scripting: Python/PowerShell

Communication skills

Travel flexibility

Education

Bachelor's or Master's degree in Cybersecurity or related field

Tools

Python

PowerShell

Windows

Linux

Cloud environments

Job description

Dematic is seeking a Principal OT Product Security Architect to lead security architecture across OT/ICS for Dematic products and solutions. You will define secure networks, lead design reviews, and drive secure-by-design and DevSecOps in product lifecycles to protect customer operations.

You will translate standards into technical requirements and mentor teams to advance OT cybersecurity maturity. Hybrid role near US offices with occasional travel; you will collaborate with Product Management,