Senior MES Developer

Experience: 2 to 4 years

Location: Chennai, India

Skills: Elisity zero-trust segmentation, identity-based access control, IEC 62443, OT protocols, OPC UA, Modbus, Profinet, EtherNet/IP, VLANs, routing, firewalls, DMZ, Zero Trust Architecture, micro-segmentation concepts, Elisity platform, Policy Engine, Enforcement Points, Cisco ISE, NAC, Palo Alto, Fortinet, PLC programming basics, SCADA architecture, MES, shop-floor integration, Python, PowerShell, API-based automation

Job Summary

We are seeking an OT Segmentation Engineer with hands-on experience in Elisity zero-trust segmentation to design, implement, and manage secure micro-segmentation across industrial (OT) networks. The role focuses on securing plant floor assets (PLCs, SCADA, MES, IIoT devices) by enforcing identity-based access control and network segmentation aligned with IEC 62443 / Zero Trust principles.

Key Responsibilities

OT Network Segmentation (Core Responsibility)

Design and implement zero-trust segmentation policies using Elisity

Configure Elisity identity-based segmentation (policy enforcement via Edge Nodes / Policy Engine)

Define zone & conduit architecture aligned with ISA/IEC 62443

Industrial Network Integration

Work with OT assets: PLCs (Siemens, Rockwell, B&R;)

SCADA systems (Ignition, WinCC, FactoryTalk)

MES (Tulip, eMaint, etc.)

Integrate Elisity with: Active Directory / Identity providers

Asset inventory / discovery tools

Asset Discovery &

- Classification

Identify and classify: OT devices (PLCs, HMIs, Robots)

IT-OT boundary systems (historians, MES)

Map communication flows: PLC ↔ SCADA

SCADA ↔ MES

MES ↔ ERP

Policy Design &

- Implementation

Create granular access control policies based on: Identity

Device type

Application

Implement: Least privilege access

East-West traffic control

Security &

- Compliance





Align segmentation design with: IEC 62443

NIST Cybersecurity Framework

Support: Vulnerability mitigation

Incident response (containment using segmentation)

Monitoring &

- Troubleshooting

Monitor segmentation policies and traffic flows

Troubleshoot: Communication blocks between OT systems

Network latency or performance issues

Optimize policies for high availability of critical plant systems

Documentation &

- Reporting

Prepare: Network segmentation diagrams

Policy documentation

Security assessment reports

Support audits and compliance reviews

Skill Requirements

Technical Skills

OT protocols: OPC UA, Modbus, Profinet, EtherNet/IP

Networking: VLANs, routing, firewalls, DMZ

Security: Zero Trust Architecture

Micro-segmentation concepts

Elisity / OT Security Tools

Hands-on with: Elisity platform (Policy Engine, Enforcement Points)

Exposure to: Cisco ISE / NAC (nice to have)

Firewall segmentation (Palo Alto / Fortinet)

Industrial Systems Knowledge

PLC programming basics

SCADA architecture

MES / shop-floor integration

Scripting / Automation (Preferred)

Python / PowerShell

API-based automation for policy management

Education

Bachelor’s in: Electrical / Instrumentation / Computer Science / IT

Certifications (preferred): IEC 62443

CCNA / CCNP

CISSP / GICSP

Soft Skills

Robust collaboration with: OT engineers

IT security teams

Plant operations

Ability to translate: OT requirements ↔ security architecture

Other Requirements

Experience with: Digital Manufacturing / MES integration (Tulip, Ignition)

Edge platforms (Kubernetes / OpenShift in OT)

Industrial cybersecurity frameworks implementation

Role Relevance (Your Context)

This role strongly aligns with your work on: IT/OT integration

MES SCADA architecture network segmentation &

- IEC 62443

industrial digitalization projects

📌 Senior MES Developer (India)
🏢 HCL Technologies
📍 India