OT Security Engineer

Role: OT Security Engineer

Location: Prague Hungary remote Poland remote

Contract type: full time

About Carrier

At Carrier we make modern life possible by delivering innovative and sustainable ground-breaking systems and services that matter for people and our planet. We exceed the expectations of our customers by anticipating industry trends working tirelessly to master and revolutionize them. This is why we come to work every day. And we do it The Carrier Way.

Join us and we can make a difference together.

About the role

The OT Security Engineer is responsible for securing the technologies that operate and control the organizations critical industrial environments including ICS SCADA PLCs and other operational technology systems. This role ensures that industrial processes remain safe reliable and resilient by designing implementing and maintaining security controls across OT networks and assets. The OT Security Engineer partners closely with plant operations engineering teams and IT security to protect physical processes from cyber threats and support ongoing modernization of OT environments.

Benefits

We are committed to offering competitive benefits programs for all of our employees and enhancing our programs when necessary.

Among the many benefits Carrier offers Exciting innovative environment possibility for further development and international career opportunities high-profile team daily use of English and other foreign languages language courses Competitive remuneration and other benefits (meal vouchers contribution to life or pension insurance holidays etc.) Flexible working hours possibility for home office sick days.

Requirements

• 37 years of experience in cybersecurity industrial control systems OT engineering or related technical fields.
• Hands-on experience with ICS/OT technologies such as SCADA systems PLCs DCS platforms or industrial automation networks.
• Understanding of OT networking concepts (Modbus DNP3 OPC BACnet Profinet EtherNet/IP).
• Familiarity with OT security frameworks such as ISA/IEC 62443 or NIST 800-82.
• Experience with one or more OT security platforms (Nozomi Dragos Claroty etc.).
• Strong troubleshooting skills in operational environments with high availability and safety requirements.
• Experience implementing segmentation firewalls and DMZs for OT networks.
• Knowledge of industrial protocols vendor equipment (Rockwell/Allen-Bradley Siemens Schneider Emerson) or SCADA platforms.
• Experience with incident response in ICS environments.
• Ability to write or review PLC logic (Ladder Logic Function Block Structured Text) is a plus.
• Certifications such as GICSP GRID ISA/IEC 62443 Cybersecurity Certificates CCNA/CCNP or CISSP.
• Strong communication and cross-functional skills; ability to work in safety-critical manufacturing or industrial environments.

Responsibilities

OT Security Engineering & Architecture

• Design implement and maintain security controls for OT/ICS environments including SCADA PLCs HMIs engineering workstations and plant networks.

• Develop OT security architecture aligned with the Purdue Model ISA/IEC 62443 and company security standards.

• Support secure network segmentation between IT and OT including firewalls DMZs and remote access solutions.

Threat Detection Monitoring & Incident Response

• Deploy and maintain OT monitoring tools (e.g. Nozomi Claroty Dragos) to identify anomalous behavior and potential intrusions.

• Investigate security alerts related to industrial assets and support incident response activities within OT environments.

• Analyze OT network traffic and develop detection logic for ICS-specific threats.

Vulnerability & Risk Management

• Perform risk assessments on OT systems control networks and industrial equipment.

• Identify and prioritize vulnerabilities in OT assets including legacy systems with limited patching options.

• Recommend compensating controls where traditional IT security techniques are not feasible.

OT Asset & Configuration Management

• Maintain accurate inventory of OT assets communication flows and dependencies.

• Assist in securing PLC logic firmware HMI configurations and industrial device backups.

• Collaborate with plant/operations engineers on secure configuration baselines for control system components.

Secure Operations & Modernization

• Support secure integration of IIoT devices sensors and industrial automation technologies.

• Evaluate third-party vendor solutions remote support connections and contractor access.

• Provide engineering guidance during OT system upgrades lifecycle replacements and modernization projects.

Cross-Team Collaboration

• Work directly with operations plant maintenance network engineers and cybersecurity teams to ensure OT environments meet safety and security requirements.

• Communicate risks and recommended safeguards to non-technical stakeholders in manufacturing and operational groups.

Our commitment to you

Our greatest assets are the expertise creativity and passion of our employees. We strive to provide a great place to work that attracts develops and retains the best talent promotes employee engagement fosters teamwork and ultimately drives innovation for the benefit of our customers. We strive to create an environment where you feel that you belong with diversity and inclusion as the engine to growth and innovation. We develop and deploy best-in-class programs and practices providing enriching career opportunities listening to employee feedback and always challenging ourselves to do better. This is The Carrier Way.

Join us and make a difference.

Apply Now!

Carrier is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity national origin disability or veteran status age or any other federally protected class.

Job Applicants Privacy Notice:

Click on this link to read the Job Applicants Privacy Notice