Principal OT Product Security Architect

KION Group

Confirmed live yesterday High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Atlanta, GAPlano, TXGrand Rapids, MI
Salary
$147,600–$184,500 / yr
Employment
Full-time
Posted
4 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $206k
This role $166k
$135k $266k
below market most similar roles pay here above market

This role pays less than 80% of similar roles. Most pay $176,993–$235,500 — the blue band above. At the midpoint, this role pays about $166k versus about $206k for comparable roles.

Based on 240 similar postings.

Employer

About KION Group

KION Group is a leading global provider of industrial trucks, related services, and supply chain solutions, operating brands such as Linde Material Handling, STILL, and Dematic. Industry: Industrial Equipment & Supply Chain Solutions

KION Group currently has 3 open roles on FindRole.

Most-posted roles

View all roles at KION Group

At a glance

TL;DR · Principal OT Product Security Architect

JOB TITLE: Principal OT Product Security Architect As the Principal OT Product Security Architect, you will provide technical leadership to ensure products and solutions are secure by design. Reporting to the Chief Product Security Architect, you will define and maintain OT cybersecurity architecture, requirements, and standards for warehouse automation equipment, robotics, and cloud-connected environments. You will lead technical design reviews, define secure network architectures including segmentation and firewalls, and integrate DevSecOps principles into development lifecycles. Your work involves translating standards like IEC 62443, NIST CSF, and ISO 27001 into technical requirements. You will utilize skills in threat modeling, vulnerability assessments, and penetration testing across Windows, Linux, and cloud systems. This role solves critical security challenges in industrial automation, protecting customer supply chain operations from cyber threats while ensuring operational reliability.

What you'll do

  • Define and maintain OT cybersecurity architecture, requirements, standards, and reference architectures for all products.
  • Lead security architecture and technical design reviews across OT, software, networking, and cloud environments.
  • Define secure network architectures including segmentation, firewalls, industrial DMZs, and secure remote access.
  • Integrate secure-by-design and DevSecOps principles into the product and system development lifecycles.
  • Lead threat modeling, attack-surface assessments, vulnerability assessments, and penetration testing.
  • Establish risk-based approaches for OT vulnerability remediation and compensating controls.
  • Translate cybersecurity standards like IEC 62443 and NIST CSF into practical technical requirements.
  • Mentor engineering and software teams on OT cybersecurity architecture and secure design practices.

What we're looking for

  • Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering, IT, or a related field, or equivalent experience.
  • 8+ years of experience in cybersecurity, OT/ICS security, product security, network security, or systems engineering.
  • Demonstrated experience designing or assessing OT cybersecurity architectures.
  • Experience with industrial automation, robotics, warehouse automation, manufacturing, or control systems.
  • Strong understanding of OT/ICS architecture, including PLCs, HMIs, SCADA, segmentation, firewalls, and secure remote access.
  • Knowledge of vulnerability management, penetration testing, threat modeling, and risk-based remediation in OT environments.
  • Working knowledge of networking, Windows/Linux, cloud environments, and scripting/automation such as Python or PowerShell.
  • Knowledge of IEC 62443, NIST CSF, NIST SP 800-82, ISO 27001, and/or EU CRA.
  • CISSP, GICSP, GRID, GCIP, Security+, Network+, ISA/IEC 62443 (IC32/IC33), or equivalent (preferred).
  • Ability to travel occasionally to customer sites and Dematic facilities (preferred).
  • Must be authorized to work in the U.S. without the need for current or future sponsorship.

More like this

Similar roles

Principal Product Security Architect

Danaher Corporation

Irvine, CA 9 days ago $170,000–$210,000
Cybersecurity Secure Software Design DevSecOps CI/CD Threat Modeling Vulnerability Assessment Cloud-Native Architecture Embedded Systems NIST ISO 27001 OWASP Risk Assessment Software Development Lifecycle Application Security
10+ yrs exp

Security Architect, Product Security

Humana

Remote (Atlanta, GA) +10 18 days ago
Application Security SAST SCA Secrets Scanning Secure SDLC Vulnerability Management Cloud Security Container Security API Security DAST SaaS Security Product Security Security Architecture CISSP Security+ CSSLP GSEC GWAPT
2+ yrs exp Remote

VP, Product Security Architecture

Synchrony

Stamford, CT +6 33 days ago
Application Security Threat Modeling API Security SAML OIDC mTLS Secrets Management CI/CD SAST DAST SCA DevSecOps PCI-DSS GDPR SOC 2 GitHub Jenkins Service Mesh Cryptography OWASP Top 10
10+ yrs exp

Staff Product Security Architect

GitLab

Remote (Canada) +3 16 days ago $168,000–$238,000
Application Security Software Supply Chain Security Authentication Authorization Multi-tenant Isolation Distributed Systems Prototyping Security Architecture Risk Management Artifact Provenance
Remote

Director, Product Security

Green Dot Corp

Los Angeles, CA +4 30 days ago
Application Security SAST DAST CI/CD Security Architecture Mobile Security Product Security Security Specifications
8+ yrs exp Hybrid

Director, Product Security

Green Dot Corp

Los Angeles, CA +4 30 days ago
Application Security SAST DAST CI/CD Security Architecture Mobile Security Product Security Security Specifications
8+ yrs exp Hybrid