OT Security Engineer

About Carrier  

Carrier Global Corporation, global leader in intelligent climate and energy solutions, is committed to creating innovations that bring comfort, safety and sustainability to life. Through cutting-edge advancements in climate solutions such as temperature control, air quality and transportation, we improve lives, empower critical industries and ensure the safe transport of food, life-saving medicines and more. Since inventing modern air conditioning in 1902, we lead with purpose: enhancing the lives we live and the world we share. We continue to lead because of our world-class, inclusive workforce that puts the customer at the center of everything we do. For more information, visit corporate.carrier.com or follow Carrier on social media at @Carrier. 

About the role

The OT Security Engineer is a mid-level individual contributor responsible for implementing and managing secure controls across Carrier’s global operational technology landscape. This role partners closely with engineering, infrastructure, and business teams to ensure that security is embedded into the design of OT systems, platforms, and services. The ideal candidate brings technical skills in OT/ICS cybersecurity, strategic thinking, and a strong understanding of industrial control systems and enterprise security architecture. 

Key Responsibilities

• Implement and manage cybersecurity technologies and tools in OT environments

• Lead engineering solutioning efforts to properly secure compute resources, systems, networks, handhelds, data, and storage across manufacturing sites.

• Conduct interviews with technology counterparts across the global and facilitate cybersecurity workshops towards implantations.

• Perform physical security walk-downs, technical configuration reviews, and personnel interviews.

• Provide guidance on security principles for ICS, SCADA, DCS, and other OT systems.

• Evaluate emerging technologies and assess their security implications in OT environments.

• Collaborate with operations teams to ensure secure implementation of OT solutions.

• Contribute to the development of OT security architecture frameworks and governance processes.

• Support global OT segmentation initiatives, including site-level firewall deployment, policy review, rule base governance, and secure connectivity between enterprise and manufacturing environments.

• Act as a subject matter expert (SME) for OT security engineering in cross-functional initiatives.

• Support the development of OT security risk mitigation strategies.

• Provide expert guidance for Cybersecurity Incident Response.

Basic Qualifications

• Bachelor’s degree in computer engineering, Electrical Engineering, Computer Science or a related technical field.

• 5+ years of experience in OT/ICS cybersecurity.

• Proven experience performing OT/ICS cybersecurity functions including technology implementation/management, vulnerability assessments, and incident response.

• Experience in securing OT/ICS network architecture across the Purdue reference model.

• Knowledge of security systems/products including firewalls, intrusion detection, anti-malware software, authentication systems, and log management.

• Hands-on experience with Palo Alto Networks technologies, including next-generation firewalls, Panorama, security policy management, VPNs, zone-based segmentation, and firewall rule lifecycle management.

• Experience with common industrial network protocols including Serial, Modbus, Profibus, and EthernetIP.

• Familiarity with cybersecurity frameworks such as IEC 62443, ISO 27001, NIST SP 800-82, NIS 1 / NIS 2, and NERC CIP.

• Strong communication, presentation, and stakeholder engagement skills.

• Ability and willingness to travel.

Preferred Qualifications

• Experience in both IT and OT security environments.

• Experience with systems security engineering, design engineering, and security evaluations for OT systems.

• Experience in OT security solution design, deployment, and management.

• Experience supporting multi-site OT security programs, including network segmentation, firewall standardization, secure remote access, asset visibility, vulnerability management, and operational resilience initiatives.

• Certifications such as CISSP, GICSP, CISM, CFSE/CFSP are desirable.

Pay Range 

Factors which may affect pay within this range include, but are not limited to, skills, education, experience, and other unique qualifications of the successful candidate.      

Other Compensation

 This position is entitled to short-term cash incentives, subject to plan requirements.        

         

Benefits 
We offer a competitive total rewards package that may include other benefits and well‑being programs. Offerings vary by role and location and are designed to support employees’ health, security, and success. 

Equal Treatment and Non-Discrimination 

Carrier is committed to equal treatment and non-discrimination principles.  

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, or disability, or any other applicable  protected class.  

If you require a reasonable accommodation to complete the application process, participate in an interview, or otherwise engage in the hiring process, please contact us at [email protected]. We will make every effort to meet your needs in accordance with applicable laws. 

Application Deadline

Applications will be accepted for at least 3 working days from Job Posting Date.

Job Applicant’s Privacy Notice 

Please click on the link below to review the Job Applicant Privacy Notice. 

Use of AI 
Technology-enabled tools may support parts of the recruitment process, with oversight by people.

Pay Range:

Kč937,200.00-Kč1,874,400.00