Lead Engineer Manufacturing Security

Job Summary

Lead Engineer, Manufacturing Security is responsible for executing OT network security implementations at Danaher manufacturing sites under the direction of the Principal Architect and Lead Engineers. This role focuses on translating detailed OT architecture specifications into deployed network configurations - working hands-on at the site level to implement firewall policy, VLAN segmentation, and DMZ architecture in coordination with OpCo Site Engineers and the DIS network team. This position offers the opportunity to build deep operational expertise in industrial cybersecurity delivery across a truly global, multi-OpCo manufacturing environment.

This position is part of the Corporate Information Security and will be located in Pune.

Responsibilities

• Execute OT network segmentation implementations at assigned Danaher manufacturing sites in accordance with architecture specifications from the DIS OT CoE - configuring firewalls, deploying VLANs, implementing DMZ architectures, and enforcing zone-based access controls in coordination with the DIS and OpCo network teams
• Partner with OpCo OT Site Engineers during site visits and change windows - serving as the DIS technical presence to ensure implementation accuracy, flag production risk in real time, and adapt to site-specific constraints within the bounds of approved architecture
• Validate OT segmentation implementations against architecture specifications post-deployment - conducting connectivity validation, firewall rule audits, zone boundary verification, and compensating control checks to confirm designs have been correctly and completely executed
• Document site-specific implementation findings, as-built network configurations, approved deviations, and compensating controls - maintaining accurate records that feed into the enterprise OT asset inventory, site risk register, and DIS engineering knowledge base
• Support knowledge transfer to the MSP Operations Team during transition from project delivery to steady-state operations - developing runbooks, escalation procedures, and operational playbooks for each deployed site so the run team can maintain segmentation effectively

Essential Requirements

• Hands-on experience configuring industrial firewalls, implementing VLAN-based network segmentation, and building DMZ architectures in OT or industrial environments - with demonstrated ability to execute network changes safely in active production settings
• Working knowledge of OT/ICS components and their network connectivity requirements - including PLCs, SCADA, HMI, historian, and BMS systems - sufficient to assess connectivity dependencies and implement segmentation without disrupting operational processes
• Familiarity with OT cybersecurity frameworks (IEC 62443, NIST SP 800-82) and their application to network segmentation and access control - with the ability to implement to specification and flag deviations for escalation to the Principal Architect or Lead Engineer
• Experience executing network changes in regulated manufacturing environments (life sciences, pharmaceutical, medical device, chemical, or similar) with an understanding of the operational and GxP constraints on change management in production-active facilities
• 7+ years of experience in OT security engineering, industrial network engineering, or IT/OT integration, with direct hands-on experience implementing network changes and segmentation configurations in active manufacturing environments

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.