Principal OT Security Engineer

Donaldson; BLOOMINGTON (MN); Hybrid; USD 112,000 - 140,000; Full time

Job summary

Donaldson is seeking a Principal OT Security Engineer to define enterprise OT cybersecurity strategy, architecture, and a technical roadmap across global manufacturing, distribution, and lab operations. The role is hybrid with the Bloomington, MN office.

Responsibilities include leading large-scale OT security projects, developing policies per IEC 62443, NIST, and ISO standards, and partnering with leadership to balance security with uptime and resilience goals. Travel up to 20% is expected.

Qualifications

• Bachelor’s degree required with 8+ years cybersecurity experience or HS diploma with 12+ years cybersecurity experience.
• Significant OT/ICS experience is required.
• Deep expertise in industrial cybersecurity architecture and risk management is required.

Responsibilities

• Define and drive enterprise OT security architecture and standards.
• Lead large-scale OT security initiatives (segmentation, monitoring, secure remote access).
• Establish OT cybersecurity policies aligned with IEC 62443, NIST, and regulatory requirements.
• Partner with manufacturing, distribution, engineering, and leadership to align security with uptime and resilience goals.
• Lead remediation of high-impact security risks and vulnerabilities.
• Represent OT security in audits and executive discussions.
• Influence long-term strategy, roadmap planning, and maturity improvements.

Skills

OT/ICS cybersecurity

Industrial cybersecurity architecture

Risk management

Education

Bachelor’s degree

High school diploma/GED with 12+ years experience

Job description

Donaldson is committed to solving the world’s most complex filtration challenges. Together, we make cool things. As an established technology and innovation leader, we are continuously evolving to meet the filtration needs of our changing world. Join a culture of collaboration and innovation that matters and a chance to learn, effect change, and make meaningful contributions at work and in communities.

The Principal OT Security Engineer defines enterprise OT cybersecurity strategy, architecture, and a technical roadmap, leading complex initiatives across global manufacturing, distribution, and lab operations. Qualified candidates must be able to work a hybrid schedule at our Bloomington, MN office.

Role Responsibilities

• Define and drive enterprise OT security architecture and standards
• Lead large-scale OT security initiatives (segmentation, monitoring, secure remote access)
• Establish OT cybersecurity policies aligned with IEC 62443, NIST, and regulatory requirements
• Partner with manufacturing, distribution, engineering, and leadership to align security with uptime and resilience goals
• Lead remediation of high-impact security risks and vulnerabilities
• Representing OT security in audits and executive discussions
• Influence long-term strategy, roadmap planning, and maturity improvements

Travel: Up to 20%

Minimum Qualifications

• Bachelor’s degree and 8+ years of cybersecurity experience OR a high school diploma/GED and 12+ years of cybersecurity experience
• Significant OT/ICS experience
• Deep expertise in industrial cybersecurity architecture and risk management

Preferred Qualifications

• Experience leading enterprise OT security programs in global manufacturing environments
• Proven track record working with executive leadership and driving strategic initiatives
• Deep experience with regulatory and compliance frameworks (IEC 62443, NIST, ISO 27001, TISAX, CMMC)
• Experience with OT security tools (Nozomi, Claroty, Dragos, etc.)
• Experience leveraging AI tools to improve the effectiveness of a security tool or mechanism
• Executive-level communication skills, both verbal and written, capable of articulating technical topics to a wide range of stakeholders to drive understanding and alignment

Preferred Certifications

• CISSP
• CISM or CRISC
• GICSP
• SANS ICSS certifications (e.g., GRID, GCIP)

Annual Salary Range: $111,840-$139,800. Actual salaries will vary based on several factors including, but not limited to applicable work experience, training, education, performance.

This position is eligible for annual incentive plan based on performance and company growth.

Employee benefits are part of the competitive total rewards package that Donaldson Company, Inc. provides to you. Our comprehensive benefits program includes health benefits, retirement plan (401k), paid time away, paid leaves (including paid parental leave) and more.

Employment opportunities for positions in the United States may require use of information which is subject to the export control regulations of the United States. Hiring decisions for such positions are required by law to be made in compliance with these regulations. Applicants for employment opportunities in other countries must be able to meet the comparable export control requirements of that country and of the United States.

Our policy is to provide equal employment opportunities to all qualified persons without regard to race, gender, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity and/or expression, or other status protected by law.