RemoteLeaf Logo
Log in Sign up

Senior/Staff/Principal SWE - OT Security Engineering

2 months, 4 weeks ago
United States
Full-time
Senior
Security Engineer
Software Development
Datadog Go gRPC Microservices OpenID Connect REST API Rust SAML Splunk TCP/IP TLS
Apply Now
Appgate

Appgate

Appgate is the secure access company empowering secure connections with Zero Trust principles for people, devices, and systems.

Professional Services
251-1K
Founded 2020
View All Jobs 11

Description

  • Design and implement secure remote access capabilities for AppGate's OT platform.
  • Build backend services across the Controller, Gateway, and Connector components in a distributed architecture.
  • Develop and maintain REST and gRPC APIs for policy evaluation, access control, protocol registry management, and OT integrations.
  • Create protocol-aware policy authoring for industrial protocols such as Modbus TCP, DNP3, IEC 61850, OPC-UA, and EtherNet/IP.
  • Implement evidence and audit logging that supports compliance and can be forwarded to tools such as Splunk, Kinesis, and Datadog.
  • Deliver session governance features including session recording, keystroke logging, step-up authentication, and approval workflows.
  • Integrate with OT visibility platforms and normalize asset context into policy-ready attributes.
  • Work with industrial assets such as PLCs, RTUs, HMIs, and historians in OT environments.
  • Own features end-to-end from architecture through production deployment in customer environments.
  • Define technical direction, lead architecture reviews, and support hiring as the team scales to 5–7 engineers.

Requirements

  • Hands-on experience building or operating secure remote access systems such as VPNs, ZTNA, jump servers, privileged access tools, or session brokers.
  • Direct experience in OT/ICS environments such as manufacturing, energy, utilities, oil and gas, water, transportation, or defense.
  • Strong systems programming experience in Go, Rust, or a comparable language.
  • Solid understanding of networking fundamentals including TCP/IP, TLS, and firewalls.
  • Solid understanding of identity fundamentals including SAML, OIDC, and PKI.
  • Familiarity with the Purdue Model and IT/OT DMZ design patterns.
  • Working knowledge of OT protocols such as Modbus, DNP3, OPC-UA, and EtherNet/IP.
  • High-ownership mindset with comfort operating in a small team and solving problems proactively.
  • Experience with OT/SRA/PAM platforms such as Claroty, Dragos, Nozomi, Xona, Cyolo, Dispel, SSH PrivX OT, CyberArk, or BeyondTrust.
  • Exposure to IEC 62443, NIST SP 800-82, NERC CIP-005/007, or CMMC.
  • Background in safety-critical, regulated, or compliance-driven environments.
  • For Staff/Principal candidates: track record owning platform architecture and mentoring engineering teams.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Canonical

Software Engineer - Secure Container Images

Canonical 251-1K Internet Software & Services

Canonical is hiring a container image engineer in the EMEA region to build and maintain hardened Ubuntu-based images and the automated pipelines that test, secure, publish, and support them at scale.

Middle East Africa Europe Full-time Mid Level DevOps Engineer Software Engineer
Agile Bash CI/CD DevSecOps Docker GitHub Actions GitOps Go Jenkins Kubernetes Linux Podman Python Rust
5 hours, 48 minutes ago
Imagine Pediatrics

Principal Software Engineer

Imagine Pediatrics 11-50 Health Care Providers & Services

Imagine Pediatrics is seeking a Principal Software Engineer to shape technical strategy for its pediatric digital product suite supporting clinical teams and members.

United States Full-time Lead Software Engineer
$200k-$220k
AWS React React Native
5 hours, 48 minutes ago
Reddit

Senior Software Engineer, Ads Creative Effectiveness

Reddit 1K-5K Internet Software & Services

Reddit is hiring a Senior Software Engineer for its Ads Creative Effectiveness team to build GenAI and predictive systems that improve ad creative performance and brand-safe editing workflows at scale.

United States Full-time Senior Software Engineer
$191k-$267k
Generative AI Go LLM Microservices Python
6 hours, 3 minutes ago
LightFeather

Senior ServiceNow Engineer

LightFeather 51-250 Internet Software & Services

LightFeather is hiring a Senior ServiceNow Engineer to design, develop, and deploy ServiceNow solutions for federal government projects in a fully remote full-time role.

United States Full-time Senior Software Engineer
$90k-$115k
Agile Angular Azure CSS GCP HTML JavaScript JIRA Kanban REST API Scrum
6 hours, 3 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers