OT Cybersecurity Engineer

Applied Control Engineering, Inc.; Baltimore (MD); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Comprehensive benefits package

Opportunities for professional development

Job summary

Applied Control Engineering, Inc. is seeking an OT Cybersecurity Engineer based in Baltimore, Maryland. You will architect and deploy OT network infrastructure and implement cybersecurity controls aligned with industry standards.

Candidates should have over 3 years of relevant experience, strong knowledge of Windows Server, and communication skills to effectively convey complex concepts. The role offers professional development opportunities and the chance for advancement into senior leadership.

Qualifications

• 3+ years of hands-on experience in industrial networking or closely related discipline.
• Proven experience with Windows Server and Active Directory.
• Strong knowledge of network security frameworks and standards.

Responsibilities

• Architect and deploy OT network infrastructure and Windows server environments.
• Implement cybersecurity controls aligned with IEC 62443 and NIST CSF.
• Conduct OT network and asset assessments and deliver prioritized remediation roadmaps.

Skills

Industrial networking

System administration in industrial environments

Windows Server

Active Directory

Network segmentation

Communication skills

Education

Bachelor's degree in Engineering or Computer Science

Tools

Cisco switches

Fortinet firewalls

VMware

Hyper-V

Job description

OT Cybersecurity Engineer - Baltimore, Maryland

Job Overview

As a Controls Engineer at ACE, you will join a project team delivering automation projects to customers. Your primary job functions will include:

• Architect, deploy, and document OT network infrastructure (switches, routers, firewalls, VLANs, DMZs) and Windows server environments that support industrial control systems.
• Implement cybersecurity controls—intrusion detection/prevention, endpoint hardening, network segmentation, and secure remote access—aligned with IEC 62443 and NIST CSF frameworks.
• Build and maintain Windows environments, including Active Directory, Group Policy, and WSUS patch management.
• Conduct OT network and asset assessments: inventory devices, map data flows, identify vulnerabilities, and deliver prioritized remediation roadmaps.
• Translate complex risk findings into clear, compelling narratives for both plant-floor operators and executive stakeholders.
• Recommend and right-size security solutions that balance operational uptime requirements with cybersecurity best practices.
• Work on cross-office and cross-discipline project teams where you may be the only cybersecurity engineer. Build the skills to mentor junior engineers on OT security principles, network design, and professional development.
• Collaborate with project managers to track project statuses and ensure customer satisfaction.

The successful applicant will have opportunities for advancement into ACE’s senior leadership organization. ACE offers professional development opportunities within all departments of our organization.

Preferred Education

Bachelors (or higher) degree in Chemical Engineering, Electrical Engineering, Mechanical Engineering, Robotics Engineering, Bioengineering, Industrial Engineering, Computer Engineering or Computer Science.

Required Skills & Experience

• Three+ (3+) hands‑on experience in industrial networking, system administration in an industrial environment, or a closely related discipline.
• Demonstrated expertise with Windows Server, Active Directory, Group Policy, and patching workflows. Virtualization experience (VMware, Hyper‑V).
• Strong working knowledge of managed switches, routers, and firewalls (Cisco, Fortinet, Palo Alto, or equivalent)—comfortable with both CLI and GUI configuration.
• Experience designing and implementing network segmentation, firewall rule sets, and secure architectures in industrial settings.
• Familiarity with OT security frameworks and standards (IEC 62443, NIST SP 800‑82, or similar).
• Familiarity with process control or other manufacturing processes.
• Proven experience in delivering projects to successful conclusion.Ability to handle a project through its entire lifecycle.
• Strong written and oral communication skills that allow you to communicate complicated concepts both internally and externally.
• Thorough knowledge of business application software (MS Office package).
• Displays a positive and professional demeanor.
• Demonstrates a flexible and cooperative working style.
• Willing to work off‑hours when required.
• Must possess a valid driver’s license.
• Willing to submit to drug testing and/or background checks as mandated for a) employment, and b) customer contract requirements.

Preferred Qualifications

• Industry certifications: GICSP, ISA/IEC 62443 Cybersecurity Certificate, CISSP, CCNA/CCNP, or equivalent.
• Direct experience with industrial control systems (DCS, PLC/HMI, SCADA) in manufacturing, utilities, or energy.
• Hands‑on exposure to OT‑specific security tools such as Claroty, Nozomi Networks, Dragos, or Tenable.ot.

Applied Control Engineering, Inc. (ACE) provides employees with a comprehensive and attractive benefits package and salary ranges commensurate with experience.

For more information about Applied Control Engineering, Inc. (ACE), please visit our website at www.ace-net.com.

ACE is committed to a drug‑free workplace. All employment is contingent upon successful completion of drug and background screening.

ACE is an equal opportunity employer. ACE will consider all qualified applicants for employment without discrimination on grounds of disability, sex or sexual orientation, race or national or ethnic origin, age, religion, protected veteran status or any other characteristic protected by law. If you need a reasonable accommodation to meet any of the above qualifications, please contact Human Resources.