RemoteLeaf Logo
Log in Sign up

Senior/Staff/Principal SWE - OT Security Engineering

2 months, 1 week ago
United States
Full-time
Senior
Security Engineer
Software Development
Datadog Go gRPC Microservices OpenID Connect REST API Rust SAML Splunk TCP/IP TLS
Apply Now
Appgate

Appgate

Appgate is the secure access company empowering secure connections with Zero Trust principles for people, devices, and systems.

Professional Services
251-1K
Founded 2020
View All Jobs 12

Description

  • Design and implement secure remote access capabilities for AppGate's OT platform.
  • Build backend services across the Controller, Gateway, and Connector components in a distributed architecture.
  • Develop and maintain REST and gRPC APIs for policy evaluation, access control, protocol registry management, and OT integrations.
  • Create protocol-aware policy authoring for industrial protocols such as Modbus TCP, DNP3, IEC 61850, OPC-UA, and EtherNet/IP.
  • Implement evidence and audit logging that supports compliance and can be forwarded to tools such as Splunk, Kinesis, and Datadog.
  • Deliver session governance features including session recording, keystroke logging, step-up authentication, and approval workflows.
  • Integrate with OT visibility platforms and normalize asset context into policy-ready attributes.
  • Work with industrial assets such as PLCs, RTUs, HMIs, and historians in OT environments.
  • Own features end-to-end from architecture through production deployment in customer environments.
  • Define technical direction, lead architecture reviews, and support hiring as the team scales to 5–7 engineers.

Requirements

  • Hands-on experience building or operating secure remote access systems such as VPNs, ZTNA, jump servers, privileged access tools, or session brokers.
  • Direct experience in OT/ICS environments such as manufacturing, energy, utilities, oil and gas, water, transportation, or defense.
  • Strong systems programming experience in Go, Rust, or a comparable language.
  • Solid understanding of networking fundamentals including TCP/IP, TLS, and firewalls.
  • Solid understanding of identity fundamentals including SAML, OIDC, and PKI.
  • Familiarity with the Purdue Model and IT/OT DMZ design patterns.
  • Working knowledge of OT protocols such as Modbus, DNP3, OPC-UA, and EtherNet/IP.
  • High-ownership mindset with comfort operating in a small team and solving problems proactively.
  • Experience with OT/SRA/PAM platforms such as Claroty, Dragos, Nozomi, Xona, Cyolo, Dispel, SSH PrivX OT, CyberArk, or BeyondTrust.
  • Exposure to IEC 62443, NIST SP 800-82, NERC CIP-005/007, or CMMC.
  • Background in safety-critical, regulated, or compliance-driven environments.
  • For Staff/Principal candidates: track record owning platform architecture and mentoring engineering teams.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Alloy

Security / DevSecOps Engineer (Blockchain-Fintech)

Alloy Internet Software & Services

Index Industries is seeking a DevSecOps engineer to secure its stealth-stage blockchain and cloud infrastructure as it prepares to launch its first technology in 2026.

United States Full-time Mid Level Blockchain Developer Security Engineer
$160k-$200k
AWS Blockchain CI/CD DevSecOps Docker GCP Go Kubernetes Python Secrets Management
17 hours, 59 minutes ago
Datadog

Senior Software Engineer - Security Libraries

Datadog 5K-10K IT Services

Datadog is hiring a senior polyglot engineer to build and operate security library integrations for its run-time security products, with a primary focus on .NET or Java.

France Spain Full-time Senior Security Engineer Software Engineer
C# C++ Envoy Go HAProxy Java Maven .NET Nginx Node.js PHP Python Ruby WAF
17 hours, 59 minutes ago
Dropzone AI

Head of Security Research

Dropzone AI 51-200 computer & network security

Dropzone AI is hiring a Head of Security Research to lead its cybersecurity research and detection team as the company builds agentic AI systems that reimagine threat intelligence, hunting, detection engineering, and alert investigation.

United States Full-time Lead Security Engineer
$220k-$255k
Cybersecurity SOC
18 hours, 14 minutes ago
Databricks

Sr. Forward Deployed Engineer (FDE) - Retail

Databricks 1K-5K IT Services

Databricks is hiring a Forward Deployed Engineer to work directly with customers on building and productionizing data and AI solutions on the Databricks platform.

United States Full-time Senior Software Engineer Solutions Engineer
$182k-$250k
Apache Spark AWS Azure CI/CD Databricks GCP JavaScript Machine Learning MLOps Python Scala TypeScript
18 hours, 14 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers