Principal OT Product Security Architect

KION Group

. Provide technical leadership to ensure Dematic products and solutions are secure by design and protect customer supply chain operations .

Posted 10/7/2026full-timeUnited StatesLead💰 $147,600 - $184,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in OT Cybersecurity Architecture, including secure network design, vulnerability management, and risk-based remediation strategies. Proficient in translating cybersecurity standards into practical engineering requirements while leading cross-functional teams in high-stakes environments.

Highest-signal resume keywords

OT Cybersecurity Architecture DesignVulnerability ManagementPenetration TestingIEC 62443 KnowledgeCISSP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityOT/ICS SecurityNetwork SecuritySystems EngineeringIndustrial AutomationRoboticsSCADAPython ScriptingPowerShell ScriptingRisk-Based Remediation

Soft Skills

Strong CommunicationTechnical WritingStakeholder ManagementCollaborative WorkInfluencing Technical Decisions

Tools & Technologies

FirewallsVPNsCloud EnvironmentsSecurity Monitoring PlatformsSOC/SIEM/MDR Integration

Certifications & Qualifications

CISSPGICSPGRIDGCIPSecurity+Network+ISA/IEC 62443

Industry Keywords

OT EnvironmentsIndustrial NetworksControl SystemsManufacturingWarehouse AutomationCybersecurity StandardsNIST CSFISO 27001EU CRATechnical Leadership

Tech Stack

Tools & technologies

CloudCyber SecurityFirewallsLinuxPython

About the role

Key responsibilities & impact

Provide technical leadership to ensure Dematic products and solutions are secure by design and protect customer supply chain operations
Define and maintain OT cybersecurity architecture, requirements, standards, and reference architectures
Lead security architecture and technical design reviews across OT, software, controls, networking, and cloud environments
Define secure network architectures, including segmentation, zones/conduits, firewalls, industrial DMZs, secure remote access, and OT-to-cloud connectivity
Integrate secure-by-design and DevSecOps principles into product and system development lifecycles
Define cybersecurity requirements for products, systems, software, embedded components, and customer deployments
Lead or support threat modeling, attack-surface assessments, vulnerability assessments, penetration testing, and security architecture assessments
Establish risk-based approaches for OT vulnerability remediation, including compensating controls
Define requirements for OT security monitoring platforms and integration with customer SOC/SIEM/MDR environments
Translate cybersecurity standards and regulations into technical requirements
Support product certification, conformity assessments, audits, customer security reviews, and cybersecurity evidence development
Perform and support OT cybersecurity assessments of Dematic and customer environments and provide remediation strategies
Partner with Engineering, Product Security, Infrastructure, and Operations teams throughout the product lifecycle
Provide technical expertise during OT cybersecurity incidents and support secure recovery and resilience strategies
Mentor cybersecurity, software, controls, and engineering teams
Evaluate emerging OT cybersecurity technologies and contribute to the long-term architecture and capability roadmap

Requirements

What you’ll need

Bachelor's or Master's degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, Information Technology, or related field, or equivalent experience
8+ years of cybersecurity, OT/ICS security, product security, network security, systems engineering, or related experience
Demonstrated experience designing or assessing OT cybersecurity architectures
Experience with industrial automation, robotics, warehouse automation, manufacturing, control systems, or other OT environments
Strong understanding of OT/ICS architecture, industrial networks, PLCs, HMIs, SCADA, robotics, segmentation, firewalls, VPNs, and secure remote access
Experience applying cybersecurity principles across complex hardware, software, and integrated systems
Knowledge of vulnerability management, penetration testing, threat modeling, security monitoring, and risk-based remediation in OT environments
Working knowledge of networking, Windows/Linux, cloud environments, and scripting/automation such as Python or PowerShell
Knowledge of IEC 62443, NIST CSF, NIST SP 800-82, ISO 27001, and/or applicable regulatory requirements such as the EU CRA
Ability to translate cybersecurity risks and regulatory requirements into practical architecture, engineering requirements, and controls
Strong communication, technical writing, consulting, and stakeholder management skills
Ability to influence technical decisions across engineering and business teams without direct authority
Ability to thrive in highly collaborative work environments
Preferred certifications: CISSP, GICSP, GRID, GCIP, Security+, Network+, ISA/IEC 62443 (IC32/IC33), or equivalent
Ability to travel occasionally to customer sites and Dematic facilities
Applicants must be authorized to work in the U.S. without the need for current or future sponsorship

Benefits

Comp & perks

Career Development
Competitive Compensation and Benefits
Pay Transparency
Global Opportunities
Occasional travel to customer sites and Dematic facilities