Senior/Staff/Principal SWE - OT Security Engineering

1 month, 2 weeks ago
Full-time
Senior
Software Development
Appgate

Appgate

Appgate is the secure access company empowering secure connections with Zero Trust principles for people, devices, and systems.

Professional Services
251-1K
Founded 2020

Description

  • Design and implement secure remote access capabilities for AppGate's OT platform.
  • Build backend services across the Controller, Gateway, and Connector components in a distributed architecture.
  • Develop and maintain REST and gRPC APIs for policy evaluation, access control, protocol registry management, and OT integrations.
  • Create protocol-aware policy authoring for industrial protocols such as Modbus TCP, DNP3, IEC 61850, OPC-UA, and EtherNet/IP.
  • Implement evidence and audit logging that supports compliance and can be forwarded to tools such as Splunk, Kinesis, and Datadog.
  • Deliver session governance features including session recording, keystroke logging, step-up authentication, and approval workflows.
  • Integrate with OT visibility platforms and normalize asset context into policy-ready attributes.
  • Work with industrial assets such as PLCs, RTUs, HMIs, and historians in OT environments.
  • Own features end-to-end from architecture through production deployment in customer environments.
  • Define technical direction, lead architecture reviews, and support hiring as the team scales to 5–7 engineers.

Requirements

  • Hands-on experience building or operating secure remote access systems such as VPNs, ZTNA, jump servers, privileged access tools, or session brokers.
  • Direct experience in OT/ICS environments such as manufacturing, energy, utilities, oil and gas, water, transportation, or defense.
  • Strong systems programming experience in Go, Rust, or a comparable language.
  • Solid understanding of networking fundamentals including TCP/IP, TLS, and firewalls.
  • Solid understanding of identity fundamentals including SAML, OIDC, and PKI.
  • Familiarity with the Purdue Model and IT/OT DMZ design patterns.
  • Working knowledge of OT protocols such as Modbus, DNP3, OPC-UA, and EtherNet/IP.
  • High-ownership mindset with comfort operating in a small team and solving problems proactively.
  • Experience with OT/SRA/PAM platforms such as Claroty, Dragos, Nozomi, Xona, Cyolo, Dispel, SSH PrivX OT, CyberArk, or BeyondTrust.
  • Exposure to IEC 62443, NIST SP 800-82, NERC CIP-005/007, or CMMC.
  • Background in safety-critical, regulated, or compliance-driven environments.
  • For Staff/Principal candidates: track record owning platform architecture and mentoring engineering teams.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior AI Engineer - APAC + Africa

ChainGPT 11-50 Internet Software & Services

ChainGPT is hiring a Senior AI Engineer to help build Brain by AIVM, an early-stage platform for verifiable and governed enterprise AI at the intersection of AI, blockchain, and agentic systems.

Blockchain System Design
16 hours, 40 minutes ago

Software Engineer | Remote | Contract to hire

TWO95 International 51-250 Internet Software & Services

Software Engineer for a 100% remote 6+ month contract-to-hire role supporting enterprise data and system integration work for healthcare and financial services contexts.

Angular AWS Ionic Microservices NestJS Oracle Serverless SQL SQL Server TypeScript
16 hours, 55 minutes ago

Software Engineer, Backend

JoVE 51-250 Media

JoVE is seeking an experienced Software Engineer to help modernize its web applications and application stack while building performant, well-tested, reusable software in a collaborative product and engineering environment.

Agile AWS CI/CD CloudFormation GitHub JIRA Kafka Microservices MongoDB Node.js PHP PostgreSQL RabbitMQ Redis REST API Scrum Serverless SQL System Design
17 hours, 10 minutes ago

Senior Agentic AI Engineer

CodeRoad 51-250 Internet Software & Services

Coderoad is hiring a Senior Agentic AI Developer to build and deploy autonomous AI systems for real-world software projects in a remote Latam role aligned to East/West Coast time zones.

AWS Azure GCP Git JavaScript Kubeflow MLflow MLOps Python React Reinforcement Learning
17 hours, 10 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers