OT Cybersecurity Engineer - Baltimore, Maryland
Are you looking for a career where you will have an immediate impact and drive projects to a successful completion? Are you motivated to help local manufacturing industries increase their competitive advantage and achieve their OT cybersecurity goals? Are you looking to join an organization of engineers that is owned and managed by fellow engineers?
Applied Control Engineering, Inc. (ACE) is seeking an OT Cybersecurity Engineer to serve as a trusted technical advisor to our customers. In this role, you will contribute to the design, deployment, and hardening of OT networks and systems, driving projects from kickoff to close-out and supporting junior engineers. This is a hands-on engineering role focused on building and securing servers and networks for industrial control systems including documenting system hardening and deploying security tools. This is a high-impact, customer-facing role for someone who thrives at the intersection of cybersecurity and industrial operations.
JOB OVERVIEW
As a Controls Engineer at ACE, you will join a project team delivering automation projects to customers. Your primary job functions will include:
- Architect, deploy, and document OT network infrastructure (switches, routers, firewalls, VLANs, DMZs) and Windows server environments that support industrial control systems.
- Implement cybersecurity controls-intrusion detection/prevention, endpoint hardening, network segmentation, and secure remote access-aligned with IEC 62443 and NIST CSF frameworks.
- Build and maintain Windows environments, including Active Directory, Group Policy, and WSUS patch management.
- Conduct OT network and asset assessments: inventory devices, map data flows, identify vulnerabilities, and deliver prioritized remediation roadmaps.
- Translate complex risk findings into clear, compelling narratives for both plant-floor operators and executive stakeholders.
- Recommend and right-size security solutions that balance operational uptime requirements with cybersecurity best practices.
- Work on cross-office and cross-discipline project teams where you may be the only cybersecurity engineer.
Build the skills to mentor junior engineers on OT security principles, network design, and professional development. - Collaborate with project managers to track project statuses and ensure customer satisfaction.
The successful applicant will have opportunities for advancement into ACE's senior leadership organization. ACE offers professional development opportunities within all departments of our organization. Engineers at ACE have opportunities for advancement that include technical leadership, project management, sales, and engineering management. ACE is currently managed and owned by engineers who have all worked as process control system engineers at ACE.
PREFERRED EDUCATION
Bachelors (or higher) degree in Chemical Engineering, Electrical Engineering, Mechanical Engineering, Robotics Engineering, Bioengineering, Industrial Engineering, Computer Engineering or Computer Science.
REQUIRED SKILLS & EXPERIENCE
- Three+ (3+) hands-on experience in industrial networking, system administration in an industrial environment, or a closely related discipline.
- Demonstrated expertise with Windows Server, Active Directory, Group Policy, and patching workflows.
Virtualization experience (VMware, Hyper-V). - Strong working knowledge of managed switches, routers, and firewalls (Cisco, Fortinet, Palo Alto, or equivalent)-comfortable with both CLI and GUI configuration.
- Experience designing and implementing network segmentation, firewall rule sets, and secure architectures in industrial settings.
- Familiarity with OT security frameworks and standards (IEC 62443, NIST SP 800-82, or similar).
- Familiarity with process control or other manufacturing processes.
- Proven experience in delivering projects to success conclusion.
- Ability to handle a project through its entire lifecycle.
- Strong written and oral communication skills that allow you to communicate complicated concepts both internally and externally.
- Thorough knowledge of business application software (MS Office package).
- Displays a positive and professional demeanor.
- Demonstrates a flexible and cooperative working style.
- Willing to work off-hours when required.
- Must possess a valid driver's license.
- Willing to submit to drug testing and/or background checks as mandated for a) employment, and b) customer contract requirements.
PREFERRED QUALIFICATIONS:
- Industry certifications: GICSP, ISA/IEC 62443 Cybersecurity Certificate, CISSP, CCNA/CCNP, or equivalent.
- Direct experience with industrial control systems (DCS, PLC/HMI, SCADA) in manufacturing, utilities, or energy.
- Hands-on exposure to OT-specific security tools such as Claroty, Nozomi Networks, Dragos, or Tenable.ot.
Applied Control Engineering, Inc. (ACE) provides employees with a comprehensive and attractive benefits package and salary ranges commensurate with experience.
For more information about Applied Control Engineering, Inc. (ACE), please visit our website at www.ace-net.com.
