Operational Technology Security Lead

Crown Holdings, Inc.; Yardley (Bucks County); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Safety commitment

Career growth

Training opportunities

Job summary

Crown Holdings, Inc. is seeking an OT Security Technical Lead to design, implement, and continuously improve cybersecurity controls across global OT environments.

Based in Yardley, PA, this office-based role partners with regional IT and plant teams to reduce cyber risk while safeguarding production continuity and product quality. The role combines engineering, architecture, and leadership to maintain security standards aligned with ISA/IEC 62443 and Purdue models, focusing on resilience and

Qualifications

• 5+ years in OT/ICS engineering, industrial automation, cybersecurity or related field.
• Experience designing/implementing security controls for OT/ICS.
• Strong understanding of OT protocols (EtherNet/IP, CIP, S7, Modbus, DNP3, OPC UA, PROFINET, BACnet).
• Proficient in OT network architecture including segmentation, firewalls, and secure remote access.

Responsibilities

• Develop and implement security controls for OT assets (PLCs, HMIs, SCADA, DCS).
• Lead technical SME efforts for OT security solutions and changes.
• Define standards and guides for operational state transitions.
• Identify and remediate OT security risks and configuration weaknesses.
• Maintain inventories of OT assets and participate in OT incident response.
• Perform OT vulnerability assessments and remediation planning.

Skills

OT/ICS engineering

OT security engineering

Security architecture

Threat modeling

Cross-functional leadership

OT network security

Root-cause analysis

Incident response

Vulnerability assessment

Industry standards (ISA/IEC 62443, NIS

Education

Bachelor’s degree in Information Systems/Computer Science/Cybersecurity

Tools

Nozomi Networks

Claroty

Dragos

Microsoft Defender for IoT

Tenable OT

Job description

Crown Holdings, Inc. is a global leader in the design, manufacture, and sale of packaging products for consumer goods. At Crown, we are passionate about helping our customers build their brands and connect with consumers around the world. We do this by delivering innovative packaging that offers significant value for brand owners, retailers, and consumers alike. With operations in 39 countries employing over 23,000 people and net sales of over $11 billion, we are uniquely positioned to bring best practices in quality and manufacturing to our customers to drive their businesses locally and globally. Sustaining a leadership position requires us to build a team of highly talented, dedicated, and driven individuals.

About The Team

The Global Information Security Team’s mission is “protect Crown’s global information systems, data and employees from cyber-based security threats while ensuring the confidentiality, integrity and availability of information used by the Crown business units to produce world class sustainable packaging solutions to our customers”.

You will join a fun, cohesive and collaborative team who love what they do and are committed to creating a safe and secure environment for the Crown family. Our team is nimble, lean and have dynamic backgrounds that foster an environment of continuous learning and growth.

Location

Yardley, PA -This is an office-based position, and individuals are expected to be in the office daily. Crown offers a flexible work hour schedule.

About The Position

The OT Security Technical Lead is responsible for designing, implementing, and continuously improving cybersecurity controls across Crown’s global manufacturing OT environments, including industrial control systems, factory automation systems, and other OT technologies as needed. The role combines OT-security engineering, architecture, technical leadership, and cross-functional partnership to reduce cyber risk while safeguarding personnel, production continuity, and product quality.

Partnering with the regional IT teams, manufacturing plant personnel and the rest of the Global Security Team, they will implement and maintain OT security solutions and ensure all OT related systems are securely configured to protect against current and emerging cyber threats and align with Crown security standards.

Responsibilities

Engineering & Technical Leadership (40%):

• Develop and implement security controls for OT assets such as PLCs, RTUs, HMIs, engineering workstations, historians, SCADA systems, DCS platforms, and industrial network equipment.
• Serve as the lead technical subject matter expert (SME) throughout the implementation of OT related security solutions and changes, including defining standard processes and authoring detailed technical guides to enable smooth transition to an operational state.
• Function as a subject matter expert (SME) for Crown’s OT security solutions, helping ensure they are managed and maintained in accordance with Crown and industry standards and continue to meet current and future requirements.
• Proactively identify OT related security configuration issues across the enterprise and coordinate timely remediation with minimal operational impact.
• Help maintain accurate inventories of OT assets, including PLCs, RTUs, HMIs, engineering workstations, SCADA servers, and industrial network devices.
• Participate in OT incident response, including triage, containment, recovery, root-cause analysis, and lessons-learned activities.
• Perform vulnerability assessments and support remediation planning for OT systems, considering operational uptime, safety, vendor guidance, and maintenance windows.

Strategy and Architecture Design (30%):

• Define and maintain the target OT cybersecurity architecture, roadmap, standards, and reference designs.
• Work with the Network Security Architect to design secure network segmentation and zoning strategies for industrial environments, aligned with the Purdue Model, ISA-95, and ISA/IEC 62443 principles.
• Conduct OT security architecture reviews, threat modeling, risk assessments, and security gap analyses.
• Identify, assess, and select global OT security related solutions and changes that improve Crown’s OT cybersecurity posture across its global operations.
• Produce detailed designs and implementation plans to ensure new OT security solutions and changes are robust, resilient, and well integrated into Crown’s environment while minimizing operational impact.

Stakeholder Collaboration and Consulting (30%):

• Work with regional IT teams, plant engineers and operators to ensure security controls are feasible, maintainable, and do not compromise production or safety.
• Support other projects and initiatives to ensure OT related components and changes are securely configured and in line with Crown security standards.

Requirements

Crown seeks an experienced and driven OT Security Technical Lead to drive improvement in Crown’s overall OT security by designing and engineering resilient, secure solutions and controls and coordinating their implementation across its global manufacturing environment.

Technical Expertise

• 5+ years of experience in OT/ICS engineering, industrial automation, cybersecurity or a related field.
• Experience of designing and/or implementing security controls/solutions for OT, industrial control systems or components (PLC, HMI, SCADA etc)
• Strong practical understanding of industrial control systems and communications protocols, including EtherNet/IP, CIP, S7 communication, Modbus, DNP3, OPC Classic/OPC UA, PROFINET, and BACnet.
• Proficient in OT network architecture and security controls, including network segmentation, firewalls, industrial DMZs, secure remote access, and secure communications.
• Demonstrated ability to identify, assess, and remediate OT related security risks, vulnerabilities, and configuration weaknesses.
• Hands-on experience with OT security platforms such as Nozomi Networks, Claroty, Dragos, Microsoft Defender for IoT, Tenable OT, or comparable technologies.
• Familiarity with major industrial automation vendors and technologies, including Siemens, Rockwell Automation, Schneider Electric, Honeywell, Emerson and GE.
• Experience serving as a technical lead on large-scale projects involving geographically distributed and cross-cultural teams.
• Demonstrated experience defining and implementing security standards, processes, and governance within large corporate IT environments.
• Working knowledge of OT security frameworks and standards, including ISA/IEC 62443, NIST SP 800-82, and the Purdue Enterprise Reference Architecture (PERA).

Core Competencies

• Strategic thinker; understands complex business needs and translates them into secure, technically sound, actionable plans.
• Quality driven and detail oriented, with advanced problem solving and troubleshooting skills.
• Strong organizational and prioritization skills; effectively manages competing tasks and consistently meets project deadlines.
• Excellent communication skills; translates technical concepts for diverse audiences and influences technical stakeholders through evidence-based recommendations.
• Proactive and self-directed; anticipates risks, identifies opportunities for improvement, and takes timely action to resolve issues before they affect delivery or security outcomes.
• Personable and relationship-focused; builds trusted, productive working relationships across teams, stakeholders, countries, and cultures to enable effective collaboration and shared outcomes.

Education & Certifications

• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or equivalent experience.
• Preferred certifications: GICSP, GRID, ISA/IEC 62443 Cybersecurity Expert or similar.
• TOGAF certification would also be desirable.

What Crown Offers You

• Strong engagement and commitment to the safety of our employees
• The opportunity to build a meaningful career
• Professional and personal development through training and work experiences

Join us and become part of a team of professionals who are passionate about sustainable packaging!

Working Together is one of the five pillars that make up our Twentyby30™ program. We aim to value and respect each individual and foster an environment of inclusivity.