Must Have Technical/Functional Skills
• Hands-on experience designing, deploying, configuring, and operating Nozomi Guardian sensors and Nozomi Central Management Console (CMC) in OT/ICS environments.
• Experience reviewing site IT/OT architecture, network diagrams, VLANs, SPAN/RSPAN or TAP availability, sensor placement, connectivity, sizing, and firewall prerequisites.
• Ability to produce site readiness checklists, low-level designs, bills of materials, implementation plans, test evidence, and handover-to-support documentation.
• Experience creating virtual machines and virtual networking for Nozomi appliances and integrating sensors with the central management platform.
• Working knowledge of passive OT asset discovery, communication-flow visibility, vulnerability identification, threat/anomaly detection, policy tuning, alert triage, and PCAP/log analysis.
• Experience integrating Nozomi with SIEM and enterprise platforms such as Splunk, CMDB, and ServiceNow, including ticket-driven incident, request, change, and problem workflows.
• Knowledge of industrial protocols, PLCs, RTUs, HMIs, SCADA systems, engineering workstations, OT DMZs, network segmentation, and operational-safety constraints.
• Experience with platform health monitoring, patching, configuration management, backup/recovery coordination, capacity monitoring, audit evidence, and vendor escalation.
• Working knowledge of IEC 62443, NIST SP 800-82, secure change management, and export-controlled or regulated delivery environments. Nozomi certification is preferred.
• Good to have: Palo Alto or Check Point firewalls, Cisco Catalyst switching, Zscaler ZPA, CyberArk, RunZero, ServiceNow, Windows/Linux administration, and AWS/Azure fundamentals.
Roles & Responsibilities
• Support Nozomi implementation across applicable Secure Connected Shop locations, covering planning, site discovery, readiness assessment, design, build, validation, stabilization, and handover to operations.
• Validate as-is OT network documentation and develop the Nozomi low-level design, bill of materials, sensor-placement plan, connectivity requirements, and implementation runbook for each assigned site.
• Create or coordinate the required VM and virtual networking, install and configure the Nozomi image, register the site and sensors in CMC, and validate secure connectivity.
• Configure Guardian/CMC assets, zones, policies, user access, alerts, dashboards, and integrations in accordance with the approved reference architecture and site requirements.
• Perform passive asset discovery and baseline validation; tune detection policies during learning and stabilization to improve asset accuracy and reduce false-positive alerts.
• Integrate Nozomi alerts and asset data with Splunk SIEM, CMDB, and ServiceNow where applicable, and validate end-to-end alert and ticket flows.
• Investigate Nozomi incidents and service requests using alerts, PCAPs, logs, platform diagnostics, and vendor guidance; coordinate escalations with site teams, SOC, network teams, and Nozomi product support.
• Execute or coordinate approved configuration changes, patching, health checks, minor defect fixes, capacity monitoring, and availability monitoring under established change controls.
• Maintain implementation evidence, asset and configuration records, test results, issue logs, risk and dependency tracking, and audit-support documentation.
• Provide operational knowledge transfer, SOPs, troubleshooting guides, s tabilization support, and formal handover-to-support acceptance for each completed site.
• Work within ITAR and customer security requirements, following approved access, data-handling, record-keeping, and onsite/remote delivery controls.
Generic Managerial Skills, If any
Strong communication, stakeholder coordination, technical documentation, problem-solving, and the ability to work independently with global OT, network, SOC, infrastructure, and site teams.
Salary Range: $110,000 - $130,000 per year
TCS Employee Benefits Summary:
Discretionary Annual Incentive.
Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
Family Support: Maternal & Parental Leaves.
Insurance Options: Auto & Home Insurance, Identity Theft Protection.
Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
Time Off: Vacation, Time Off, Sick Leave & Holidays.
Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.
