OT Cybersecurity Engineer

Vulcan Elements Inc.; North Carolina; On-site; USD 110,000 - 170,000; Full time

Job summary

Vulcan Elements Inc. is hiring an OT Cybersecurity Engineer to secure industrial control systems and manufacturing floor devices across Rockwell/Allen-Bradley, Siemens, and other platforms.

You will design IT/OT segmentation, protect OT assets, and lead the NIST SP 800-53 Low-Impact assessment and POA&M with the Automation and Engineering teams. The role requires hands-on OT security experience, familiarity with industry protocols, and the ability to work on the manufacturing floor while

Qualifications

• 3+ years in OT/ICS security, controls engineering, or industrial networking.
• Hands-on with Rockwell/Allen-Bradley or Siemens control systems and related protocols.
• Knowledge of NIST SP 800-53, ISA/IEC 62443, and POA&M processes.

Responsibilities

• Secure control systems and OT devices across the manufacturing environment.
• Design defense-in-depth OT architectures and enforce segmentation.
• Lead NIST SP 800-53 Low-Impact assessment and POA&M activities.
• Collaborate with IT, Automation, and Engineering to embed security in new lines.

Skills

OT/ICS security

Industrial networking

NIST/CSA guidelines

CMMC knowledge

Tools

Rockwell/Allen-Bradley

Siemens TIA Portal

Claroty

Dragos

Nozomi

MQTT

OPC UA

Kafka

Job description

Vulcan Elements is manufacturing American rare‑earth permanent magnets for a secure, resilient future. With a focus on national security and economic resiliency, we serve critical industries such as defense, aerospace, and automotive powering a high‑technology future. Vulcan Elements is building a team of ambitious professionals committed to Mission Focus, Technical Excellence and Integrity.

As an OT Cybersecurity Engineer, you will secure the industrial control systems and manufacturing floor devices that keep Vulcan Elements running, including PLCs, historians, and MES across Rockwell/Allen-Bradley, Siemens, and other platforms as our environment grows. You will design and enforce IT/OT network segmentation, protect OT assets, and lead the OT side of our NIST SP 800-53 (Low-Impact Baseline) assessment and Plan of Action and Milestones (POA&M). This role works closely with our Automation and Engineering teams and requires a strong safety-first mindset alongside deep security expertise.

Responsibilities

• Work with the OT Automation group to align on a segmented, defense-in-depth architecture for the OT environment, including PLCs, HMIs, historians, MES, engineering workstations, and virtualized systems.
• Secure Rockwell/Allen-Bradley and Siemens control systems, and support additional ICS/SCADA platforms as the manufacturing environment expands.
• Ensure sufficient IT/OT boundary controls and zone/conduit segmentation, and manage firewall and ACL policy aligned with NIST guidance and industry frameworks such as ISA/IEC 62443.
• Develop, own, align, and enforce internal security standards to be used by manufacturing equipment/OT vendors as the expected contractual handover requirements for anything in the internal OT environment.
• Monitor OT network asset list and industrial protocols (Modbus, EtherNet/IP, PROFINET, and others as adopted) for anomalous activity, staying vendor- and protocol-agnostic as new platforms are added.
• Lead the assessment of OT-relevant controls against the NIST SP 800-53 Low-Impact Baseline, contribute to the System Security Plan (SSP), and help build and close out the Plan of Action and Milestones (POA&M).
• Partner with our external CMMC compliance partner and IT security team to keep OT controls consistent with our NIST SP 800-171/CMMC Level 2 program.
• Own the specification and implementation of native OT monitoring systems and the development of Incident Response Plans.
• Partner with Automation, Engineering, and IT teams to build security into new production lines and control system upgrades from the start.

Responsibilities and tasks outlined are not exhaustive and may change as determined by the needs of the business.

Qualifications

• 3+ years of experience in OT/ICS security, controls engineering, or industrial networking, ideally in manufacturing, defense, or critical infrastructure.
• Hands‑on experience with Rockwell/Allen‑Bradley (ControlLogix, FactoryTalk) and/or Siemens (S7, TIA Portal, WinCC) required; comfort working across other IC/SCADA platforms and industrial protocols and the associated industrial switch technology (Modbus, EtherNet/IP, PROFINET) as the environment grows.
• Working knowledge of ISA/IEC 62443, NIST SP 800-82, and NIST SP 800-53; experience contributing to an SSP or POA&M for OT systems is a strong plus. Must be a U.S. Person due to required access to U.S. export‑controlled information or facilities.

Preferred Qualifications

• Experience being the point of contact with integrators/OEMs for cybersecurity as contracts are executed and commissioning/implementation is happening
• Worked with advanced monitoring software and hardware products made for OT environments such as Claroty, Dragos, Nozomi
• Experience or knowledge of MQTT, Sparkplug, Kafka, OPCUA
• Prior experience supporting DoD programs, federal contractors, or CUI/export-controlled (ITAR/EAR) environments.
• Ability to work on the manufacturing floor, including around industrial equipment, and to lift up to 50 lbs as needed.
• CMMC Registered Practitioner (RP), CMMC Certified Professional (CCP), GICSP, CCNA, an ISA/IEC 62443 certificate, or CompTIA Security+.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self‑identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Vulcan Elements’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and the positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.

A "recently separated veteran" means any veteran during the three‑year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval, or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded per the Executive Order 12985.