OT Security Engineer / Platform Engineer

NETbuilder; United States; Remote; USD 110,000 - 170,000; Full time

Benefits offered by this job

Remote-friendly

Travel for client engagements

Job summary

NETbuilder is seeking a hands-on network and security engineer to transform an OT environment into observable, secure, and auditable systems. You will perform passive discovery, map architecture and data flows, and ensure the monitoring platform is integrated with the RMF program and remediation planning.

You will work on planning passive asset discovery in live OT environments, build architecture diagrams, coordinate integration of OT telemetry with SIEM and other tooling, and develop

Qualifications

• Four or more years in network or security engineering, with OT/ICS exposure.
• Hands-on experience with passive OT visibility/monitoring platforms.
• Strong understanding of industrial protocols, Purdue model, and network segmentation.

Responsibilities

• Plan and run passive asset discovery in live OT environments without disrupting operations.
• Build and maintain architecture diagrams and data-flow maps for system boundary and authorization work.
• Coordinate integration of the OT monitoring platform with network infrastructure, SIEM, and other security tooling.
• Design and tune monitoring workflows so alerts reach the right people with context.
• Analyze industrial network communications to baseline behavior and flag anomalies.
• Validate controls and produce evidence mapping to RMF requirements.
• Develop remediation plans balancing safety, uptime, and maintenance windows.

Skills

OT security engineering

Passive discovery

Network architecture

Data-flow mapping

Industrial protocols

Wireshark

Education

GICSP

Security+

CCNA

Tools

Claroty

Dragos

Nozomi Networks

Job description

Location - US Remote with Client Travel (Eastern Time Zone)

The Role

You will be the hands-on engineer who turns an OT environment into something the team can see, understand, and secure. You run passive discovery, map architecture and data flows, and make sure the monitoring platform is integrated and working. Your findings feed directly into the authorization package and the remediation plan.

What You Will Do

• Plan and run passive asset discovery in live OT environments without disrupting operations.
• Build and maintain architecture diagrams and data-flow maps for system boundary and authorization work.
• Coordinate integration of the OT monitoring platform with network infrastructure, SIEM, and other security tooling.
• Design and tune monitoring workflows so alerts reach the right people with useful context.
• Analyze industrial network communications to baseline normal behavior and flag anomalies.
• Perform technical validation of controls and produce evidence the RMF Lead can map to requirements.
• Develop remediation plans that account for safety, uptime, and maintenance windows.

What You Bring

• Four or more years in network or security engineering, with at least three years in OT or IC S environments.
• Hands-on experience with passive OT visibility and monitoring platforms (for example, Claroty, Dragos, or Nozomi Networks).
• Strong understanding of industrial protocols, network segmentation, and the Purdue model.
• Experience with packet capture and analysis tools such as Wireshark.
• Ability to produce clear architecture and data-flow documentation.
• A relevant certification such as GICSP, Security+, or CCNA.
• Eligibility to work in the United States.

Nice to Have

• An active U.S. security clearance, or eligibility to obtain one.
• GIAC GRID or GCIP certification.
• Experience supporting RMF evidence collection.
• Familiarity with SIEM integration for OT telemetry.

About NETbuilder

NETbuilder is a specialist technology partner founded in 1999. We help enterprises and mid-market organizations lead technology transformation through specialist consulting, managed services, and enterprise insourcing across security, ServiceNow, observability, and agentic automation.