Lead OT Security Engineer

Smurfit Westrock is a global leader in sustainable paper and packaging solutions seeking a Lead OT Security Engineer. The role is responsible for securing manufacturing systems, industrial networks, and plant operations through cybersecurity architecture, network segmentation, vendor remote access controls, risk remediation, monitoring, incident response, and technical guidance across manufacturing sites.

Responsibilities:

• Design and implement cybersecurity architectures that protect manufacturing systems, industrial networks, and plant operations
• Develop secure network segmentation, vendor remote access, monitoring, and control strategies that reduce cyber risk while supporting operational reliability
• Troubleshoot and resolve technical issues involving vendor access, network communications, firewall policies, and cybersecurity controls in manufacturing environments
• Support engineering, maintenance, operations, site technology teams, and vendors during cybersecurity implementations, remediations, and incident response activities
• Lead cybersecurity improvement initiatives across manufacturing sites, including secure access, network modernization, monitoring, and risk reduction projects
• Assess cybersecurity risks affecting manufacturing systems and help prioritize remediation based on business impact, safety, reliability, and exposure
• Create technical documentation, network diagrams, standards, implementation guidance, and troubleshooting procedures for operational technology environments
• Partner with cross-functional teams to embed cybersecurity into the lifecycle of manufacturing systems, from design and deployment through ongoing operations
• Collaborate with security operations teams to improve monitoring, escalation, investigation, and response to cybersecurity events affecting manufacturing environments
• Contribute to operational technology cybersecurity policies, standards, risk registers, audit readiness activities, and compliance efforts
• Mentor other cybersecurity engineers and analysts by sharing technical expertise, practical guidance, and operational technology security best practices
• Serve as a subject matter expert for operational technology cybersecurity across Smurfit Westrock

Requirements:

• Four or more years of cybersecurity experience , including hands-on experience supporting manufacturing, industrial, operational technology, or critical infrastructure environments
• Strong understanding of industrial control environments , including systems and networks used to support manufacturing operations
• Strong knowledge of networking fundamentals , including routing, switching, firewalls, network segmentation, and secure remote access
• Hands-on experience with cybersecurity technologies , such as firewalls, intrusion detection tools, endpoint security tools, security monitoring platforms, or log management systems
• Experience troubleshooting network connectivity, firewall rules, remote access, and security control issues in operational or production environments
• Ability to design and implement cybersecurity controls while considering safety, uptime, reliability, and operational impact
• Experience working with cross-functional teams, including cybersecurity, information technology, engineering, maintenance, operations, and third-party vendors
• Strong written communication skills, including the ability to create technical documentation, procedures, diagrams, and implementation guidance
• Strong verbal communication skills, with the ability to explain technical issues to both technical and non-technical audiences
• WFH with the ability to travel approximately 30–40% , based on business and project needs
• Occasionally moves, lifts, or positions devices weighing up to 50 pounds
• Ability to work reliably in non-climate-controlled industrial environments, including exposure to varying temperatures, dust, and high noise levels
• Must participate in an on-call rotation to support troubleshooting and incident response
• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related field
• Professional cybersecurity certifications such as CISSP, GICSP, GRID , or equivalent certifications
• Experience with operational technology cybersecurity monitoring platforms such as Nozomi Networks, Dragos, Claroty , or similar technologies
• Experience securing vendors and third-party remote access into manufacturing or industrial environments
• Experience with industrial communication protocols such as Modbus, OPC, Ethernet/IP , or similar plant-floor technologies
• Familiarity with cybersecurity frameworks, standards, or regulations such as NIST Cybersecurity Framework, NIST guidance for industrial control systems, ISA/IEC 62443, or European cybersecurity requirements
• Experience supporting cybersecurity audits, assessments, risk registers, remediation plans, or compliance activities
• Experience leading technical projects across multiple manufacturing sites or regions
• Experience leading or participating in OT incident responses
• Demonstrates strong analytical and problem-solving skills, especially in complex technical environments
• Balances cybersecurity requirements with production needs, safety, reliability, and operational constraints
• Communicates clearly and professionally with technical teams, site leaders, vendors, and business stakeholders
• Take ownership of problems and drive them to resolution
• Works effectively across teams and builds trusted relationships with operations, engineering, cybersecurity, and technology partners
• Adapts quickly to changing priorities, urgent issues, and site-specific challenges
• Provides technical leadership without needing direct authority
• Documents work clearly and consistently to support repeatability, audit readiness, and knowledge sharing
• Maintains a continuous improvement mindset and looks for practical ways to reduce risk across the manufacturing environment