OT Security Engineer / Platform Engineer

Location - US Remote with Client Travel (Eastern Time Zone)

The Role

You will be the hands-on engineer who turns an OT environment into something the team can see, understand, and secure. You run passive discovery, map architecture and data flows, and make sure the monitoring platform is integrated and working. Your findings feed directly into the authorization package and the remediation plan.

What You Will Do

• Plan and run passive asset discovery in live OT environments without disrupting operations.
• Build and maintain architecture diagrams and data-flow maps for system boundary and authorization work.
• Coordinate integration of the OT monitoring platform with network infrastructure, SIEM, and other security tooling.
• Design and tune monitoring workflows so alerts reach the right people with useful context.
• Analyze industrial network communications to baseline normal behavior and flag anomalies.
• Perform technical validation of controls and produce evidence the RMF Lead can map to requirements.
• Develop remediation plans that account for safety, uptime, and maintenance windows.

What You Bring

• Four or more years in network or security engineering, with at least three years in OT or ICS environments.
• Hands-on experience with passive OT visibility and monitoring platforms (for example, Claroty, Dragos, or Nozomi Networks).
• Strong understanding of industrial protocols, network segmentation, and the Purdue model.
• Experience with packet capture and analysis tools such as Wireshark.
• Ability to produce clear architecture and data-flow documentation.
• A relevant certification such as GICSP, Security+, or CCNA.
• Eligibility to work in the United States.

Nice to Have

• An active U.S. security clearance, or eligibility to obtain one.
• GIAC GRID or GCIP certification.
• Experience supporting RMF evidence collection.
• Familiarity with SIEM integration for OT telemetry.

About NETbuilder

NETbuilder is a specialist technology partner founded in 1999. We help enterprises and mid-market organizations lead technology transformation through specialist consulting, managed services, and enterprise insourcing across security, ServiceNow, observability, and agentic automation.

Work Location: Remote