Job Description

OT Security Engineer
Position Summary:
Under general supervision engineer, implement, and maintain effective methods to protect ADM (Archer Daniels Midland) systems and data. Use and establish procedures and standards to consistently build, deploy, support, and integrate secure solutions, such as security tools and business systems. Collaborate with IT (Information Technology), and other business functions to provide recommendations of operational and technical controls to enable the business and maintain the security posture to appropriate risk levels.
Must display Passion, interest in Information Security, and draw recommendations based on real world experience!
Job Responsibilities:

• Design, implement, and maintain effective security measures for ICS/OT systems, supporting scalable and resilient security improvements across industrial environments.
• Evaluate OT environments to identify risks and recommend mitigation strategies aligned with internal security policies, standards, and applicable regulations.
• Review and design secure OT network architectures, including segmentation strategies, zone-conduit models, and firewall/network configurations in alignment with industry standards.
• Solve complex ICS/OT security challenges, anticipating emerging risks and ensuring alignment with business continuity and operational priorities.
• Collaborate with IT, OT, and cross-functional teams to operationalize security requirements and maintain appropriate risk levels across converged environments.
• Provide support for OT-related ServiceNow tickets, ensuring timely and accurate resolution of requests and incidents.
• Develop and maintain Standard Operating Procedures (SOPs) to ensure consistent, secure, and auditable OT operations.
• Advise internal teams on OT security plans, standards, best practices, and lessons learned.
• Pursue continuous personal development to maintain up-to-date technical and non-technical skills.
• Execute responsibilities with urgency, precision, and attention to detail, especially in high-risk or time-sensitive scenarios.

Job Requirements:

• Proficient in English communication, both verbal and written.
• Experience designing and supporting ICS network infrastructure, including industrial wireless.
• Skilled in analyzing and developing firewall ACL rules and implementing network segmentation.
• Strong background in least privilege, risk management, vulnerability management, IAM, access controls, and segmentation.
• Hands-on experience with security technologies (e.g., antivirus, firewalls, IDS, centralized logging, monitoring).
• Knowledge of industrial cybersecurity frameworks (e.g., NIST SP 800-82, ISA/IEC 62443).
• Familiarity with the Purdue Model and its application in network segmentation and security design.
• Experience with asset inventory tools and techniques for OT/ICS devices.
• Understanding of IT General Controls and third-party auditing/risk assessment methodologies.
• Ability to develop ICS security recommendations and estimate level of effort.
• Experience with automation vendors (e.g., Emerson, Rockwell, Siemens, Honeywell).
• 5+ years of experience in ICS security, defense-in-depth, and exposure to IoT/IIoT technologies.
• Strong prioritization and multitasking abilities; self-motivated and independent.
• Proven ability to align cybersecurity strategies with operational priorities and business continuity goals.
• Excellent analytical and troubleshooting skills.
• Ability to understand security risks versus business benefits and form a strong recommendation to cross-functional teams.
• Ability to communicate and collaborate effectively with other team members ina geographic and culturally diverse workforce.
• Expected to Complete projects within specified deadlines.
• Expected to Work occasional nights, weekends, holidays, and overtime.
• Expected to Perform on-call duties.
• Potential for Occasional Travel.
• Solid sense of integrity and ethics.

Desired Skills:

• Current holder of Security Certifications with ICS/OT focus (e.g. GICSP, ISA/IEC 62443, CISSP).
• Bachelors degree or equivalent work experience.
• Experience with Cisco and Palo Alto firewall configuration and ACLs.
• Experience with firewall application detectors and application inspection.
• Project management experience.
• Familiarity with PLC, HMI, DCS, SCADA systems, and industrial protocols.
• Understanding of industrial safety culture and experience in hazardous environments.

Leadership Traits:

• We are owners
• We help each other thrive
• We continuously learn
• We create the environment for diversity, equity, and inclusion to strengthen us.
• This position offers a complete benefit package, including 401K/ESOP, pension, health, life, and dental insurance.
• ADM is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age disability and veteran status.

Skills Required