Position Summary:

We are seeking an experienced Network Security professional to design, implement, and maintain security controls across both our enterprise IT network and Operational Technology (OT) environments, including manufacturing and plant floor systems. This role bridges traditional IT network security with the unique constraints of OT/ICS environments in a regulated pharmaceutical manufacturing setting, ensuring both business systems and production operations remain secure, compliant, and resilient.

Key Responsibilities:

1.

Network

Security (IT):

- Design, implement, and manage security architecture across LAN/WAN, wireless, VPN, firewalls, and cloud connectivity (Azure/Entra ID environments).
- Administer and optimize perimeter and internal segmentation controls (firewalls, NAC, DNS security/Cisco Umbrella, proxies).
- Monitor network traffic for anomalies, working closely with SOC/MDR partners (e.g., Arctic Wolf) to triage and respond to alerts.
- Manage VPN, remote access, and secure site-to-site connectivity across manufacturing plants, distribution centers, and corporate offices.
- Support identity and access controls for network infrastructure (802.1x, RADIUS, privileged access to network devices).

2. OT/ICS Security:

- Assess and secure OT environments including SCADA, PLCs, DCS, HMIs, and manufacturing execution systems (MES) used in pharmaceutical production.
- Implement IT/OT segmentation (Purdue Model alignment), including DMZs between corporate IT and plant floor networks.
- Conduct OT asset inventory, vulnerability assessment, and risk scoring specific to legacy and vendor-locked industrial systems.
- Partner with Manufacturing, Engineering,



and Automation teams to embed security requirements into OT change control, patch management, and vendor remote access processes.
- Ensure OT security controls align with regulatory constraints (validated systems, GxP change control) without disrupting production uptime.

3.

Cybersecurity Program

Support:

- Contribute to NIST CSF 2.0-aligned governance activities, supporting risk assessments, control gap remediation, and audit responses (FDA 21 CFR Part 11, GxP, SOC 2 Type II, DSCSA-related systems).
- Support penetration testing and remediation cycles for network and OT-facing assets.
- Participate in incident response for network/OT-related security events, including forensics and root-cause coordination with managed security partners.
- Maintain network security documentation, diagrams, standard operating procedures, and policy artifacts.
- Provide input into vendor risk assessments for network and OT equipment/software suppliers.

Required Qualifications:

- 1012 years of progressive experience in network security, with demonstrable hands-on exposure to both IT and OT/ICS environments.
- Solid working knowledge of firewalls, network segmentation, VPN, NAC, IDS/IPS, and secure remote access architectures.
- Practical experience with OT/ICS security frameworks (IEC 62443, NIST SP 800-82)



and Purdue Model segmentation.
- Familiarity with SCADA/PLC/DCS environments and the operational constraints of securing legacy industrial systems.
- Experience with cloud network security in Azure/Entra ID or equivalent.
- Solid understanding of NIST CSF 2.0 and broader security governance frameworks.
- Experience with SIEM/MDR-based monitoring and incident response workflows.
- Strong documentation skills able to produce network diagrams, risk assessments, and technical policy documents.
- Bachelor's degree in Computer Science, Information Security, Engineering, or related field (or equivalent experience).

Preferred Qualifications:

- Prior experience in pharmaceutical, life sciences, or other regulated manufacturing environments (GxP, validated systems, DSCSA/serialization awareness).
- Industry certifications: CISSP, GICSP, CCNP Security, CCNA, ISA/IEC 62443 Cybersecurity Certificate, or equivalent.
- Experience working alongside managed security service providers (MDR/SOC partners) and coordinating cross-functional incident response.
- Exposure to identity lifecycle and privileged access management concepts as applied to network devices and OT assets.

Key Competencies:

- Ability to translate between IT security rigor and OT operational realities (uptime, safety, validation constraints).
- Strong cross-functional collaboration with Manufacturing, Automation/Engineering, Compliance, and Quality teams.
- Analytical and methodical approach to risk assessment and incident triage.
- Clear written and verbal communication for both technical and non-technical audiences.

📌 Network Security Engineer (India)
🏢 Sama AI
📍 India