OT Security Technical Lead

CR_79 CROWN Packaging Manufacturing UK Limited; Yardley (WA); On-site; USD 120,000 - 180,000; Full time

Job summary

Crown Crown Holdings, Inc. is seeking an OT Security Technical Lead to design, implement, and continually improve cybersecurity controls across Crown’s global OT environments, including PLCs, HMIs, SCADA, and industrial networks.

You will lead technical work, develop architecture standards, and partner with regional IT and plant teams to safeguard production. The role emphasizes security architecture, risk assessment, and governance within industrial environments, with office-based expectations

Qualifications

• 5+ years of OT/ICS engineering or related field.
• Experience designing and/or implementing security controls/solutions for OT, industrial control systems or components (PLC, HMI, SCADA).
• Strong practical understanding of ICS and protocols: EtherNet/IP, CIP, S7, Modbus, DNP3, OPC Classic/OPC UA, PROFINET, BACnet.
• Proficient in OT network architecture: segmentation, firewalls, industrial DMZs, secure remote access, secure communications.
• Experience identifying, assessing, and remediating OT security risks, vulnerabilities, and configuration weaknesses.
• Hands-on experience with OT security platforms such as Nozomi Networks, Claroty, Dragos, Defender for IoT, Tenable OT.
• Familiarity with major industrial vendors (Siemens, Rockwell, Schneider Electric, Honeywell, Emerson, GE).
• Experience leading large-scale projects with distributed teams.
• Experience defining security standards, processes, and governance in large IT/OT environments.
• Knowledge of ISA/IEC 62443, NIST SP 800-82, PERA.

Responsibilities

• Develop and implement security controls for OT assets (PLCs, RTUs, HMIs, historians, SCADA, DCS).
• Lead SME on OT security solutions and changes, including detailed guidance for ops readiness.
• Coordinate remediation of OT security issues with minimal operational impact.
• Maintain inventories of OT assets and participate in OT incident response and vulnerability efforts.
• Collaborate with regional IT and plant teams to ensure feasible and secure deployments.

Skills

OT/ICS engineering

Industrial cybersecurity

Security architecture

Cross-functional leadership

Threat modeling

Education

Bachelor's degree in Information Systems, Computer Science, Cybersecurity

Tools

Nozomi Networks

Claroty

Dragos

Microsoft Defender for IoT

Tenable OT

Job description

About Crown Crown Holdings, Inc. through it's subsidiaries, is a world leader in the metal packaging production process. We design and manufacture a wide range of innovative and sustainable metal packaging solutions and products. Our clients are some of the largest and most respected companies in the world. Crown is dedicated to building a team of highly talented, dedicated, and driven individuals. It's an exciting time to join our business because Crown offers you the opportunity to grow and develop your skills in an expanding industry. Crown was founded with the goal of valuing and promoting sustainability and this vision continues to be essential to our long-term future.

Job Description: About the Company Crown Holdings, Inc. is a global leader in the design, manufacture, and sale of packaging products for consumer goods. At Crown, we are passionate about helping our customers build their brands and connect with consumers around the world. We do this by delivering innovative packaging that offers significant value for brand owners, retailers, and consumers alike. With operations in 39 countries employing over 23,000 people and net sales of over $11 billion, we are uniquely positioned to bring best practices in quality and manufacturing to our customers to drive their businesses locally and globally. Sustaining a leadership position requires us to build a team of highly talented, dedicated, and driven individuals.

About the Team The Global Information Security Team’s mission is “protect Crown’s global information systems, data and employees from cyber-based security threats while ensuring the confidentiality, integrity and availability of information used by the Crown business units to produce world class sustainable packaging solutions to our customers”. You will join a fun, cohesive and collaborative team who love what they do and are committed to creating a safe and secure environment for the Crown family. Our team is nimble, lean and have dynamic backgrounds that foster an environment of continuous learning and growth.

Location Yardley, PA (USA) or Wantage (UK). This is an office-based position, and individuals are expected to be in the office daily. Crown offers a flexible work hour schedule.

About the Position The OT Security Technical Lead is responsible for designing, implementing, and continuously improving cybersecurity controls across Crown’s global manufacturing OT environments, including industrial control systems, factory automation systems, and other OT technologies as needed. The role combines OT-security engineering, architecture, technical leadership, and cross-functional partnership to reduce cyber risk while safeguarding personnel, production continuity, and product quality. Partnering with the regional IT teams, manufacturing plant personnel and the rest of the Global Security Team, they will implement and maintain OT security solutions and ensure all OT related systems are securely configured to protect against current and emerging cyber threats and align with Crown security standards.

Engineering & Technical Leadership (40%)

• Develop and implement security controls for OT assets such as PLCs, RTUs, HMIs, engineering workstations, historians, SCADA systems, DCS platforms, and industrial network equipment.
• Serve as the lead technical subject matter expert (SME) throughout the implementation of OT related security solutions and changes, including defining standard processes and authoring detailed technical guides to enable smooth transition to an operational state.
• Function as a subject matter expert (SME) for Crown’s OT security solutions, helping ensure they are managed and maintained in accordance with Crown and industry standards and continue to meet current and future requirements.
• Proactively identify OT related security configuration issues across the enterprise and coordinate timely remediation with minimal operational impact.
• Help maintain accurate inventories of OT assets, including PLCs, RTUs, HMIs, engineering workstations, SCADA servers and industrial network devices.
• Participate in OT incident response, including triage, containment, recovery, root-cause analysis, and lessons-learned activities.
• Perform vulnerability assessments and support remediation planning for OT systems, considering operational uptime, safety, vendor guidance, and maintenance windows.

Strategy and Architecture Design (30%)

• Define and maintain the target OT cybersecurity architecture, roadmap, standards, and reference designs.
• Work with the Network Security Architect to design secure network segmentation and zoning strategies for industrial environments, aligned with the Purdue Model, ISA-95, and ISA/IEC 62443 principles.
• Conduct OT security architecture reviews, threat modeling, risk assessments, and security gap analyses.
• Identify, assess, and select global OT security related solutions and changes that improve Crown’s OT cybersecurity posture across its global operations.
• Produce detailed designs and implementation plans to ensure new OT security solutions and changes are robust, resilient, and well integrated into Crown’s environment while minimizing operational impact.

Stakeholder Collaboration and Consulting (30%)

• Work with regional IT teams, plant engineers and operators to ensure security controls are feasible, maintainable, and do not compromise production or safety.
• Support other projects and initiatives to ensure OT related components and changes are securely configured and in line with Crown security standards.

Requirements

• 5+ years of experience in OT/ICS engineering, industrial automation, cybersecurity or a related field.
• Experience of designing and/or implementing security controls/solutions for OT, industrial control systems or components (PLC, HMI, SCADA etc).
• Strong practical understanding of industrial control systems and communications protocols, including EtherNet/IP, CIP, S7 communication, Modbus, DNP3, OPC Classic/OPC UA, PROFINET and BACnet.
• Proficient in OT network architecture and security controls, including network segmentation, firewalls, industrial DMZs, secure remote access, and secure communications.
• Demonstrated ability to identify, assess, and remediate OT related security risks, vulnerabilities, and configuration weaknesses.
• Hands‑on experience with OT security platforms such as Nozomi Networks, Claroty, Dragos, Microsoft Defender for IoT, Tenable OT, or comparable technologies.
• Familiarity with major industrial automation vendors and technologies, including Siemens, Rockwell Automation, Schneider Electric, Honeywell, Emerson and GE.
• Experience serving as a technical lead on large-scale projects involving geographically distributed and cross-cultural teams.
• Demonstrated experience defining and implementing security standards, processes, and governance within large corporate IT environments.
• Working knowledge of OT security frameworks and standards, including ISA/IEC 62443, NIST SP 800-82, and the Purdue Enterprise Reference Architecture (PERA).

Education & Certifications

• Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or equivalent experience.
• Preferred certifications: GICSP, GRID, ISA/IEC 62443 Cybersecurity Expert or similar.
• TOGAF certification would also be desirable.

Core Competencies

• Strategic thinker; understands complex business needs and translates them into secure, technically sound, actionable plans.
• Quality driven and detail oriented, with advanced problem solving and troubleshooting skills.
• Strong organized and prioritization skills; effectively manages competing tasks and consistently meets project deadlines.
• Excellent communication skills; translates technical concepts for diverse audiences and influences technical stakeholder through evidence-based recommendations.
• Proactive and self-directed; anticipates risks, identifies opportunities for improvement, and takes timely action to resolve issues before they affect delivery or security outcomes.
• Personable and relationship-focused; builds trusted, productive working relationships across teams, stakeholders, countries, and cultures to enable effective collaboration and shared outcomes.

What Crown Offers You

Strong engagement and commitment to the safety of our employees The opportunity to build a meaningful career Professional and personal development through training and work experiences Join us and become part of a team of professionals who are passionate about sustainable packaging!

Working Together Working Together is