Principal Architect, Manufacturing Security

Bring more to life.

Learn about the Danaher Business System which makes everything possible.

ThePrincipal ArchitectManufacturing Securityisresponsible for defining and owning Danahers enterprise OT security architecture across its global manufacturing lab and R&D portfolio. This role sets the technical direction for network segmentation IT/OT boundary design DMZ architecture andsecureremote access across 15 operating companies and 160 sites worldwide. This position offers a rare opportunity to shape the cybersecurity posture of one of the most complex multi-OpCoindustrial environments in the global life sciences and diagnostics industry.

This position is part of theCorporate Information Securityand will belocatedasRemote in Europe.

In this role you will have the opportunity to:

• Own and evolve the enterprise OT security architecture blueprint for Danahers global manufacturing portfolio including network segmentation standards tiered security zone frameworks (ISA-95/Purdue) IT/OT boundary controls DMZ patterns and BMS isolation strategy across 15 operating companies

• Lead the design and portfolio-wide adoption of secure remote access architecture aligned to theremote accessplatform retiring legacy VPN and direct-vendor connections and extending zero-trust network access to OT OEMs contractors and remote support vendors across all operating companies

• Partner with the Manufacturing Security Lead andinformation securityleadership to develop OT cybersecurity policies architecture governance standards and control frameworks that translate intoOpCo-level implementation plans ensuring consistency acrosscriticalsitesand the broader portfolio

• Drive the Architecture Review Board (ARB) process for OT security capabilities including micro-segmentationRemote AccessOT extension OT monitoring tools and industrialfirewallplatforms validatingtechnical designs before deployment and enforcing architectural standards across the portfolio

• Provide expert OT security advisory toOpCoCIOs site IT leads and plant engineers including architecture consultation for high-risksites andarchitectural oversight for the segmentation remediation program

• Provide guidelines and standards to align to good securitycontrolsinthe enablement of digital manufacturingto

The essential requirements of the job include:

• Deepexpertisein OT/ICS network architecture including Purdue Model/ISA-95 zone segmentation industrial DMZ designfirewallpolicy for OT protocols (ModbusProfinetEtherNet/IP OPC-UA BACnet) and secure remote access architecture for multi-site manufacturing environments

• Hands-on experience designing and validating network segmentation implementations across complex multi-site OT environments including PLCs DCS SCADA BMS HMI and historian systems in life sciences pharmaceutical or similarly regulated manufacturing

• Strong command of OT-specific cybersecurity frameworks including IEC 62443 NIST SP 800-82 CIS Controls for ICS and CISA/NSA OT security guidance withdemonstratedexperience applying these standards in a federated multi-OpCoenterprise

• Demonstrated experience with zero-trust network access (ZTNA) and SASE architectures (Zscaler or equivalent) in OT environments including integration with industrial remote access protocols vendor management workflows and identity governance

• 12 years of experience in OT/ICS security network architecture or industrial cybersecurity with at least 5 years in a principal architect distinguished engineer or equivalent senior IC capacity within a complex multi-site manufacturing environment