Principal OT Product Security Architect
KION Group AG1 day ago
Grand Rapids, MI, USA +2 moreStaff+
Base Salary
$148k - $185k/yr
Responsibilities
- Define and maintain OT cybersecurity architecture, requirements, standards, and reference architectures for Dematic products and solutions.
- Lead security architecture and technical design reviews across OT, software, controls, networking, and cloud environments.
- Define secure network architectures involving segmentation, zones/conduits, firewalls, industrial DMZs, secure remote access, and OT-to-cloud connectivity.
- Integrate secure-by-design and DevSecOps principles into product and system development lifecycles.
- Define cybersecurity requirements for products, systems, software, embedded components, and customer deployments.
- Lead or support threat modeling, attack-surface assessments, vulnerability assessments, penetration testing, and security architecture assessments.
- Establish risk-based OT vulnerability remediation approaches, including compensating controls when patching affects safety, availability, reliability, or operations.
- Define OT security monitoring requirements and integrations with customer SOC, SIEM, and MDR environments.
- Translate cybersecurity standards and regulations into technical requirements, including IEC 62443, NIST CSF, NIST SP 800-82, ISO 27001, and the EU Cyber Resilience Act.
- Support product certification, conformity assessments, audits, customer security reviews, and cybersecurity evidence development.
- Perform OT cybersecurity assessments of Dematic and customer environments and provide remediation strategies.
- Provide technical expertise during OT cybersecurity incidents and support secure recovery and resilience strategies.
- Mentor cybersecurity, software, controls, and engineering teams on OT cybersecurity architecture and secure design practices.
- Evaluate emerging OT cybersecurity technologies and contribute to the long-term architecture and capability roadmap.
Requirements
- Bachelor’s or master’s degree in cybersecurity, computer science, computer engineering, electrical engineering, information technology, or a related field, or equivalent experience.
- At least 8 years of cybersecurity, OT/ICS security, product security, network security, systems engineering, or related experience, including designing or assessing OT cybersecurity architectures.
- Experience with industrial automation, robotics, warehouse automation, manufacturing, control systems, or other OT environments.
- Strong understanding of OT/ICS architecture, industrial networks, PLCs, HMIs, SCADA, robotics, segmentation, firewalls, VPNs, and secure remote access.
- Experience applying cybersecurity principles across complex hardware, software, and integrated systems.
- Knowledge of vulnerability management, penetration testing, threat modeling, security monitoring, and risk-based remediation in OT environments.
- Working knowledge of networking, Windows, Linux, cloud environments, and scripting or automation such as Python or PowerShell.
- Knowledge of IEC 62443, NIST CSF, NIST SP 800-82, ISO 27001, and applicable regulatory requirements such as the EU CRA.
- Ability to translate cybersecurity risks and regulatory requirements into practical architecture, engineering requirements, and controls.
- Strong communication, technical writing, consulting, and stakeholder management skills, with the ability to influence decisions without direct authority.
- Preferred certifications include CISSP, GICSP, GRID, GCIP, Security+, Network+, and ISA/IEC 62443 IC32 or IC33, or equivalent.
- Ability to travel occasionally to customer sites and Dematic facilities.
- Applicants must be authorized to work in the U.S. without current or future sponsorship.
Benefits
- Career development opportunities.
- Competitive compensation and benefits.
- Global opportunities.
- Hybrid work arrangement requiring proximity to Dematic offices in Grand Rapids, Michigan; Atlanta, Georgia; or Plano, Texas.
- Occasional travel to customer sites and Dematic facilities.
- Individual-contributor role with the ability to support the team in a lead role.
About KION Group AG
KION Group AG builds industrial trucks (forklifts) and warehouse automation systems for manufacturers, logistics providers, and e-commerce operators. It operates through brands such as Dematic, Linde Material Handling, STILL, and Baoli, offering equipment, software, and lifecycle services including maintenance and fleet management. Founded in 2006 and headquartered in Frankfurt am Main, Germany, KION is a public company listed on the Frankfurt Stock Exchange.