Lead Engineer, Manufacturing Security - USA Remote

Danaher is a life sciences, diagnostics, and biotechnology company seeking a Lead Engineer, Manufacturing Security to lead OT network security improvements across its operating companies. The role designs and delivers network segmentation, firewall, DMZ, and remote-access implementations while serving as the senior technical resource for OT security delivery in manufacturing environments.

Responsibilities:

• Serve as the senior OT security technical resource and primary DIS engineering point of contact for assigned platform operating companies — building trusted relationships with OpCo CIOs, IT leads, and plant engineers to translate DIS architecture standards into locally executable implementation plans
• Translate enterprise OT architecture blueprints from the Principal Architect into network-executable engineering designs including firewall policy, VLAN topology, DMZ architecture, access control rules, and compensating controls for EoL/legacy assets — ensuring designs are safe to implement in active manufacturing environments
• Partner with OpCo OT Site Engineers and network teams during change window execution — serving as the DIS technical lead on-site or on-call during cutover to ensure segmentation changes are implemented without disrupting production operations, batch processes, or automated manufacturing systems
• Contribute to the deployment of OT remote access controls at platform sites alongside the Remote Access Lead — replacing legacy VPN, direct-vendor connections, and consumer-grade remote tools with approved, monitored, and controlled access methods
• Build the engineering knowledge base for the OT Security — documenting site-specific architecture decisions, implementation playbooks, deviation rationales, and as-built network diagrams for use by the broader DIS manufacturing security team

Requirements:

• Strong hands-on experience designing and implementing OT network segmentation in live industrial environments — including VLAN architecture, industrial firewall configuration (Fortinet, Palo Alto, Cisco, or equivalent), DMZ build, and zone-based access controls across multi-site manufacturing operations
• Demonstrated ability to lead OT network change projects in production-sensitive environments — including scheduling around production cycles, coordinating with plant operations and safety teams, and implementing compensating controls during transition periods without causing unplanned downtime
• Deep familiarity with OT/ICS components and their network dependencies — including PLCs, DCS, SCADA, HMI, historian, and BMS systems — and the OT protocols they rely on (Modbus, Profinet, EtherNet/IP, OPC-UA, BACnet) — sufficient to make correct firewall and segmentation decisions in the presence of vendor and OpCo constraints
• Working knowledge of IEC 62443, NIST SP 800-82, and ISA-99 standards as applied to network segmentation and zone access controls — with hands-on experience applying these frameworks to remediate audit findings at manufacturing sites
• 10+ years of experience in OT/ICS security engineering or industrial network engineering, with significant experience leading segmentation, firewall deployment, or OT infrastructure projects at multiple manufacturing sites simultaneously
• Experience managing concurrent segmentation or infrastructure projects across multiple operating companies or plant locations with different OT environments, production constraints, and IT governance models
• Familiarity with OT asset discovery and network visibility platforms (Claroty, Nozomi Networks, Dragos, or Armis) and experience using them to validate zone membership and access control coverage during and after segmentation implementation