OT Cybersecurity Engineer

LVI Associates; Baltimore (MD); On-site; USD 110,000 - 150,000; Full time

Job summary

LVI Associates in Baltimore seeks an OT Cybersecurity Engineer to design, deploy, and harden OT networks and industrial control systems. This hands-on role focuses on securing servers, networks, and remote access, with customer-facing responsibility.

You will work across IEC 62443 and NIST CSF, translate risk findings for operators and executives, mentor junior engineers, and contribute to project lifecycles from kickoff to close-out.

Qualifications

• 3+ years hands-on experience in industrial networking or similar environments.
• Demonstrated expertise with Windows Server, AD, GPO, and patching workflows.
• Knowledge of OT security frameworks and standards (IEC 62443, NIST SP 800-82).
• Ability to document architecture, configurations, and remediation steps clearly.

Responsibilities

• Architect, deploy, and document OT network infrastructure (switches, routers, firewalls, VLANs, DMZs).
• Implement cybersecurity controls, IDS/IPS, endpoint hardening, segmentation, and secure remote access.
• Build and maintain Windows environments, including AD, GPO, and WSUS patching.
• Assess OT networks and assets; map data flows; create remediation roadmaps.
• Translate risk findings into clear narratives for operators and executives.
• Mentor junior engineers on OT security principles and network design.

Skills

Industrial Networking

Windows Server

OT Security

Documentation

Project Lifecycle

Tools

VMware

Hyper-V

Active Directory

Group Policy

WSUS

Cisco

Fortinet

Palo Alto

Job description

OT Cybersecurity Engineer - Baltimore, Maryland

This company is seeking an OT Cybersecurity Engineer to serve as a trusted technical advisor to its customers. In this role, the successful candidate will contribute to the design, deployment, and hardening of OT networks and systems, driving projects from kick-off to close-out and supporting junior engineers. This is a hands‑on engineering role focused on building and securing servers and networks for industrial control systems, including documenting system hardening and deploying security tools. It is a high‑impact, customer‑facing position for someone who thrives at the intersection of cybersecurity and industrial operations.

The OT cybersecurity practice helps manufacturers protect the computerised devices that make modern industry possible, whether referred to as Operational Technology (OT), Industrial Control Systems (ICS), or IoT. The team partners with customers from initial risk assessment through implementation, monitoring, and ongoing security operations.

Engineers within the business have become industry‑leading technical experts, project managers, sales engineers, and engineering managers. The company is seeking passionate engineers to join the team.

Job Overview

As an OT Cybersecurity Engineer, the successful candidate will join a project team delivering automation projects to customers. Primary job functions will include:

• Architecting, deploying, and documenting OT network infrastructure (switches, routers, firewalls, VLANs, DMZs) and Windows server environments that support industrial control systems.
• Implementing cybersecurity controls, intrusion detection/prevention, endpoint hardening, network segmentation, and secure remote access, aligned with IEC 62443 and NIST CSF frameworks.
• Building and maintaining Windows environments, including Active Directory, Group Policy, and WSUS patch management.
• Conducting OT network and asset assessments: inventorying devices, mapping data flows, identifying vulnerabilities, and delivering prioritised remediation roadmaps.
• Translating complex risk findings into clear, compelling narratives for both plant‑floor operators and executive stakeholders.
• Recommending and right‑sizing security solutions that balance operational uptime requirements with cybersecurity best practices.
• Working on cross‑office and cross‑discipline project teams, where the candidate may be the only cybersecurity engineer, and building the skills to mentor junior engineers on OT security principles, network design, and professional development.
• Collaborating with project managers to track project statuses and ensure customer satisfaction.

The successful applicant will have opportunities for advancement into the organisation's senior leadership team. Professional development opportunities are available within all departments, and engineers have paths to advancement that include technical leadership, project management, sales, and engineering management. The business is currently managed and owned by engineers who have all worked as process control system engineers within the company.

Required Skills & Experience

• Three+ (3+) years of hands‑on experience in industrial networking, system administration in an industrial environment, or a closely related discipline.
• Demonstrated expertise with Windows Server, Active Directory, Group Policy, and patching workflows.
• Virtualisation experience (VMware, Hyper‑V).
• Strong working knowledge of managed switches, routers, and firewalls (Cisco, Fortinet, Palo Alto, or equivalent), comfortable with both CLI and GUI configuration.
• Experience designing and implementing network segmentation, firewall rule sets, and secure architectures in industrial settings.
• Familiarity with OT security frameworks and standards (IEC 62443, NIST SP 800-82, or similar).
• Familiarity with process control or other manufacturing processes.
• Proven experience in delivering projects to a successful conclusion.
• Ability to handle a project through its entire lifecycle.
• Strong written and oral communication skills, enabling the candidate to communicate complicated concepts both internally and externally.
• Thorough knowledge of business application software (MS Office package).
• Displays a positive and professional demeanour.
• Demonstrates a flexible and cooperative working style.
• Willing to work off‑hours when required.
• Must possess a valid driver's license.
• Willing to submit to drug testing and/or background checks as mandated for a) employment, and b) customer contract requirements.

Preferred Qualifications

• Industry certifications: GICSP, ISA/IEC 62443 Cybersecurity Certificate, CISSP, CCNA/CCNP, or equivalent.
• Direct experience with industrial control systems (DCS, PLC/HMI, SCADA) in manufacturing, utilities, or energy.
• Hands‑on exposure to OT‑specific security tools such as Claroty, Nozomi Networks, Dragos, or Tenable.ot.