OT Security Engineer

Role & responsibilities

• Review and validate the agreed rollout scope, technical prerequisites, dependencies, and site onboarding requirements.
• Assess existing remote-access use cases and identify applicable TeamViewer and other agreed scenarios for migration to Dispel.
• Support alignment of the deployment approach with the customer OT security and infrastructure architecture.
• Implement and configure the Montreal pilot, including remote-access use cases, initial user setup, and SSO/IAM integration.
• Validate connectivity, access controls, authentication, logging, and operational requirements during the pilot and rollout.
• Capture pilot lessons learned and establish a repeatable deployment pattern for subsequent sites.
• Apply the approved deployment pattern across the remaining customer sites and validate each site implementation.
• Configure users, roles, permissions, and approved access scenarios in accordance with customer requirements.
• Provide L3 troubleshooting and root-cause support for rollout, migration, connectivity, identity, and access issues.
• Coordinate technical activities with customer security, network, IAM, infrastructure, site, and application stakeholders.
• Track site-specific prerequisites, dependencies, deviations, risks, and technical issues through closure.
• Maintain implementation records, configuration documents, runbooks, knowledge articles, operating procedures, and known-issue documentation.
• Conduct technical knowledge-transfer sessions and support operational readiness and handover to the BAU support organization.

Preferred candidate profile

• Hands-on experience with OT/ICS security environments and secure remote-access solutions.
• Practical knowledge of Dispel or comparable privileged/secure remote-access platforms.
• Strong understanding of IAM, SSO, role-based access control, identity federation, and user lifecycle management.
• Experience with network connectivity, firewalls, routing, DNS, proxies, certificates, and secure access troubleshooting.
• Knowledge of security logging, audit trails, monitoring, and access-control validation.
• Experience migrating remote-access use cases from TeamViewer or similar tools to an enterprise secure-access platform.
• Ability to perform L3 incident analysis, root-cause investigation, technical remediation, and escalation management.
• Experience producing technical design inputs, configuration documents, runbooks, knowledge articles, and support procedures.
• Working knowledge of change, incident, problem, and release-management practices in enterprise environments.