Lead Engineering Manufacturing Security

Job Summary

Lead Engineer, Manufacturing Security is responsible for executing operational technology (OT) Zero-Trust remote access security program and supporting network segmentation implementations at Danaher manufacturing sites as part of the DIS OT Security Center of Excellence.

Location

Pune, Bangalore

In this role, you will have the opportunity to:

• Support the deployment and site-level configuration of a Zero-Trust remote access architecture for OT environments at Danaher manufacturing sites - working under the direction of the Remote Access Lead to operationalize OT remote access, retire legacy VPN solutions, and establish approved, monitored access methods for employees, contractors, and OT OEMs
• Conduct OT vendor remote access assessments at assigned manufacturing sites - identifying unauthorized or uncontrolled remote connections (legacy modems, consumer-grade remote tools, direct vendor links, unknown cellular connections) and coordinating remediation or replacement with DIS-approved solutions without disrupting production operations
• Implement site-level OT network segmentation changes with a specific focus on remote access zones, vendor access DMZs, and internet egress controls - working in coordination with the P4 Lead Engineers, OpCo Site Engineers, and the DIS network team during change window execution
• Manage the vendor remote access onboarding process at assigned sites - ensuring all third-party connections to OT environments are submitted through the approved DIS process, properly documented, time-limited, monitored, and authorized before use
• Maintain accurate documentation of remote access architecture configurations, active vendor access records, and site-level deviations from standard design

Essential requirements

• Hands-on experience deploying and managing ZTNA or SASE remote access solutions (Zscaler Private Access, Palo Alto Prisma Access, or equivalent) - including configuration of connectors, access policies, integration with identity providers, and split-tunneling for OT environments
• Working knowledge of OT/ICS vendor remote access patterns - including jump servers, remote desktop gateways, vendor-managed remote tools (TeamViewer, VNC, Putty, SSH, RDP), and industrial cellular modems - and the specific cybersecurity risks each access method introduces in a manufacturing environment

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.