Principal OT Security Engineer

Donaldson; BLOOMINGTON (MN); Hybrid; USD 112,000 - 140,000; Full time

Job summary

Donaldson in Bloomington, MN is seeking a Principal OT Security Engineer to define enterprise OT cybersecurity strategy, architecture, and a technical roadmap across global manufacturing, distribution, and lab operations, with a hybrid schedule at the Bloomington office.

The role leads large-scale OT security initiatives, aligns with IEC 62443, NIST, and regulatory standards, partners with operations leadership, and drives uptime, resilience, and improvement. Travel up to 20%.

Qualifications

• Bachelor’s degree and 8+ years of cybersecurity experience OR a high school diploma/GED and 12+ years of cybersecurity experience.
• Significant OT/ICS experience.
• Deep expertise in industrial cybersecurity architecture and risk management.

Responsibilities

• Define and drive enterprise OT security architecture and standards
• Lead large-scale OT security initiatives (segmentation, monitoring, secure remote access)
• Establish OT cybersecurity policies aligned with IEC 62443, NIST, and regulatory requirements
• Partner with manufacturing, distribution, engineering, and leadership to align security with uptime and resilience goals
• Lead remediation of high-impact security risks and vulnerabilities
• Representing OT security in audits and executive discussions
• Influence long-term strategy, roadmap planning, and maturity improvements

Skills

OT/ICS experience

Industrial cybersecurity architecture

Risk management

Executive communications

Education

Bachelor's degree + 8+ years cybersecurity

High school diploma + 12+ years cybersecurity

Tools

Nozomi

Claroty

Dragos

AI security tooling

Job description

Donaldson is committed to solving the world's most complex filtration challenges. Together, we make cool things. As an established technology and innovation leader, we are continuously evolving to meet the filtration needs of our changing world. Join a culture of collaboration and innovation that matters and a chance to learn, effect change, and make meaningful contributions at work and in communities.

The Principal OT Security Engineer defines enterprise OT cybersecurity strategy, architecture, and a technical roadmap, leading complex initiatives across global manufacturing, distribution, and lab operations. Qualified candidates must be able to work a hybrid schedule at our Bloomington, MN office.

Role Responsibilities

• Define and drive enterprise OT security architecture and standards
• Lead large-scale OT security initiatives (segmentation, monitoring, secure remote access)
• Establish OT cybersecurity policies aligned with IEC 62443, NIST, and regulatory requirements
• Partner with manufacturing, distribution, engineering, and leadership to align security with uptime and resilience goals
• Lead remediation of high-impact security risks and vulnerabilities
• Representing OT security in audits and executive discussions
• Influence long-term strategy, roadmap planning, and maturity improvements

Travel: Up to 20%

Minimum Qualifications

• Bachelor’s degree and 8+ years of cybersecurity experience OR a high school diploma/GED and 12+ years of cybersecurity experience
• Significant OT/ICS experience
• Deep expertise in industrial cybersecurity architecture and risk management

Preferred Qualifications

• Experience leading enterprise OT security programs in global manufacturing environments
• Proven track record working with executive leadership and driving strategic initiatives
• Deep experience with regulatory and compliance frameworks (IEC 62443, NIST, ISO 27001, TISAX, CMMC)
• Experience with OT security tools (Nozomi, Claroty, Dragos, etc.)
• Experience leveraging AI tools to improve the effectiveness of a security tool or mechanism
• Executive-level communication skills, both verbal and written, capable of articulating technical topics to a wide range of stakeholders to drive understanding and alignment

Preferred Certifications

• CISSP
• CISM or CRISC
• GICSP
• SANS ICs certifications (e.g., GRID, GCIP)

Annual Salary Range: $111,840-$139,800. Actual salaries will vary based on several factors including, but not limited to applicable work experience, training, education, performance.

This position is eligible forannualincentive plan based on performance and company growth.

Employee benefits are part of the competitive total rewards package that Donaldson Company, Inc. provides to you. Our comprehensive benefits program includes health benefits, retirement plan (401k), paid time away, paidleaves(including paid parental leave)andmore.

#LI-Hybrid

Employment opportunities for positions in the United States may require use of information which is subject to the export control regulations of the United States. Hiring decisions for such positions are required by law to be made in compliance with these regulations. Applicants for employment opportunities in other countries must be able to meet the comparable export control requirements of that country and of the United States.

Our policy is to provide equal employment opportunities to all qualified persons without regard to race, gender, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity and/or expression, or other status protected by law.