Note: The job is a remote job and is open to candidates in USA. Fluidstack is hiring a Security Engineer, OT to secure operational technology across its infrastructure fleet. The role covers OT threat modeling, security architecture and segmentation, deployment support, detection and incident response, and hardware supply-chain security.
Responsibilities
- Threat model OT systems and environments across the fleet: SCADA platforms, BMS and EPMS, cooling and power systems, and the sensor networks that feed them
- Design the architecture and segmentation that keeps a gigawatt-scale OT estate defensible: network zones, remote access paths, and the IT/OT boundary
- Forward-deploy with controls engineering to secure operational deployments, from PLC code pipelines and virtualized controllers to the SCADA layer above them
- Serve as the security consultant to power, controls, commissioning, and site teams as new capacity energizes, turning review requests into guidance teams can actually deploy
- Work with the detection and response org to understand and tune OT-environment detection coverage, and respond alongside incident responders when attacks reach OT infrastructure
- Lead engagements with hardware OEM’s on product security requirements and use cases such as firmware security, tamper evidence, and counterfeit detection to address supply chain risk
Skills
- You've secured substations, SCADA, or controls systems in production: Ignition or comparable platforms, PLCs, relays, and the industrial protocols beneath them
- You've threat modeled OT environments and turned the results into segmentation and controls that operators could live with
- You think in the Purdue Model and know when to break it, because virtualized PLCs and software-defined OT don't always fit the reference architecture
- You've worked hands-on with common OT security tooling (Claroty, Nozomi, Dragos, or similar) and know what each class of tool can and can't see
- You know BMS, EPMS, and cooling systems well enough to hold your own with the engineers who run them
- You've moved security forward in engineering teams that don't report to you, through consultation and design review rather than mandate
- NERC CIP or IEC 62443 depth
- Securing virtualized or containerized industrial control
- Commissioning-phase security work at construction sites
Company Overview
Company H1B Sponsorship