Senior Operational Technology Security Engineer

In an increasingly connected world, the pandemic has highlighted just how essential telecom networks are to keeping society running. The Network Infrastructure group is at the heart of a revolution to connectivity, pushing the boundaries to deliver more and faster network capacity to people worldwide through our ambition, innovation, and technical expertise.

Join Optical Networks division, where innovation meets scale in the AI-driven data center era. With the recent acquisition of Infinera, we’ve united two industry leaders to create an optical networking powerhouse—combining cutting-edge technology with proven leadership to redefine the future of connectivity.
Infinera is now part of the Nokia Corporation and its subsidiaries. When you apply, the information you share will be handled with care and used only for recruitment purposes within the group. 

As part of the Manufacturing organization, this role will work closely with Manufacturing, IT, Cybersecurity, and other areas of the business to assess, recommend, design, implement, and manage security solutions related to Operational Technologies (OT).

Throughout the risk management cycle, identifies and defines security requirements, designs security architecture, and implements solutions to enhance the OT security program while maintaining a balance between useability and security. Configures and manages tools supporting security operations such as SIEM, EDR, vulnerability management, and security forensics tools. 

Supports the Cybersecurity team on incident escalation and as a member of the incident response team.  Recommends and implements changes to security tools and procedures to enhance and automate operation of the OT security program. Remains informed and aware of security threats and events across the OT industry.

Will assist in mentoring and educating peers and business partners on OT security best practices, technologies, and on new and emerging threats. Must be able to demonstrate strong communication skills, both written and verbally.

Occasional after hours and weekend work.
 

 

 

• Design, implement, configure, and manage OT security tools and solutions.
• Configure and troubleshoot OT security infrastructure devices with an emphasis on balancing the security, life safety, and operational needs.
• Identify and implement solutions to automate repeatable and reliable OT security and operations tasks.
• Contribute to, document, and maintain clear communications for OT standards
• Conduct OT security forensics to aid in the collection, analysis, and reporting of incidents.
• Participate as a member of the Cybersecurity Incident Response Team providing investigation and analysis of security events.
• Architect and conduct OT security assessments through vulnerability testing, risk analysis, and reporting in a manner that assures life safety and operational success.
• Work with the Business Continuity Manager and IT to ensure that continuity of operations is planned for, documented, and tested.
• Perform process and control walkthroughs and document control narratives.
• Assist in the ongoing maintenance and process improvements of compliance programs
• Monitor OT security bulletins, alerts, and threat feeds for relevant threats.
• Understand, interpret, and comply with all organizational security policies, procedures, and other governance as provided by Infinera management and authorized stakeholders.
• Assess and recommend improvements to the OT security program.

 

 

• Bachelor’s degree (B.A./B.S.) in Computer Science or a related discipline from an accredited college or university, or equivalent experience.
• 10+ years of experience working in Operational Technology (OT) environments, with 5–8 years specifically in an OT security role.
• Strong knowledge of cybersecurity frameworks such as IEC ISA 99/62443, NIST SP 800-82, NIST 800-53, NIST CSF, and ISO 27001.
• Relevant certifications preferred, such as Certified Automation Professional (CAP), Certified Control Systems Technician (CCTS), Global Industrial Cyber Security Professional (GICSP), or ISO 27001 Auditor.
• Expertise in networking technologies, including firewalls, network design, and protocols, along with hands-on experience in SIEM configuration, automation, and management.
• Experience with Endpoint Detection and Response (EDR) solutions and vulnerability/patch management tools