OT Security Technical Lead

In this role you will design and implement OT cybersecurity controls across Crown’s global manufacturing environments, partnering with regional IT and plant teams to protect production and quality. You help set the OT security strategy, lead technical initiatives, and ensure secure operation of industrial assets. The position combines engineering, architecture, and cross‑functional collaboration to reduce risk while sustaining uptime and safety. Join a collaborative team that values continuous learning in a sustainable packaging company.

• Safety of employees
• Career growth opportunities
• Professional development and training
• Collaborative, inclusive culture
• Work with sustainable packaging teams
• Global exposure across 39 countries

• Develop and implement security controls for OT assets (PLCs, RTUs, HMIs, historians, SCADA, DCS, industrial network devices)
• Serve as lead technical SME for OT security solutions and document standard processes for operational handoff
• Maintain OT security solution configurations aligned with Crown and industry standards
• Identify and remediate OT security configuration issues with minimal operational impact
• Maintain inventories of OT assets and participate in OT incident response and lessons learned
• Conduct vulnerability assessments and remediation planning for OT systems, balancing uptime, safety, and maintenance windows
• Define and maintain target OT cybersecurity architecture, roadmaps, standards, and reference designs
• Design secure network segmentation/zoning per Purdue Model, ISA-95, ISA/IEC 62443; perform threat modeling and risk assessments
• Evaluate global OT security solutions and integration plans to strengthen Crown’s posture
• Collaborate with regional IT and plant teams to ensure security controls are feasible and do not hinder production or safety
• Support other projects to ensure OT components meet Crown security standards

• 5+ years of experience in OT/ICS engineering, industrial automation, or cybersecurity
• Experience designing/implementing security controls for OT/ICS (PLC, HMI, SCADA)
• Strong understanding of ICS protocols (EtherNet/IP, CIP, S7, Modbus, DNP3, OPC UA/Classic, PROFINET, BACnet)
• Proficient in OT network security (segmentation, firewalls, industrial DMZs, secure remote access)
• Hands-on experience with OT security platforms (Nozomi Networks, Claroty, Dragos, Microsoft Defender for IoT, Tenable OT)
• Familiarity with major vendors (Siemens, Rockwell, Schneider Electric, Honeywell, Emerson, GE)
• Experience leading large, geographically distributed projects and governing security standards
• Knowledge of OT security frameworks (ISA/IEC 62443, NIST SP 800-82, PERA)
• Bachelor’s degree in relevant field; preferred certifications (GICSP, GRID, ISA/IEC 62443 Cybersecurity Expert); TOGAF is desirable

• Strategic thinking
• Excellent communication across diverse audiences
• Proactive and self-directed
• OT/ICS engineering
• Industrial protocols (EtherNet/IP, CIP, S7, Modbus, DNP3, OPC UA, PROFINET, BACnet)
• OT network architecture and security controls (segmentation, DMZs, secure remote access)