Senior/Staff/Principal SWE - OT Security Engineering

6 hours, 33 minutes ago
Full-time
Senior
Software Development
Appgate

Appgate

Appgate is the secure access company empowering secure connections with Zero Trust principles for people, devices, and systems.

Professional Services
251-1K
Founded 2020

Description

  • Design and implement secure remote access capabilities for AppGate's OT platform.
  • Build backend services across the Controller, Gateway, and Connector components in a distributed architecture.
  • Develop and maintain REST and gRPC APIs for policy evaluation, access control, protocol registry management, and OT integrations.
  • Create protocol-aware policy authoring for industrial protocols such as Modbus TCP, DNP3, IEC 61850, OPC-UA, and EtherNet/IP.
  • Implement evidence and audit logging that supports compliance and can be forwarded to tools such as Splunk, Kinesis, and Datadog.
  • Deliver session governance features including session recording, keystroke logging, step-up authentication, and approval workflows.
  • Integrate with OT visibility platforms and normalize asset context into policy-ready attributes.
  • Work with industrial assets such as PLCs, RTUs, HMIs, and historians in OT environments.
  • Own features end-to-end from architecture through production deployment in customer environments.
  • Define technical direction, lead architecture reviews, and support hiring as the team scales to 5–7 engineers.

Requirements

  • Hands-on experience building or operating secure remote access systems such as VPNs, ZTNA, jump servers, privileged access tools, or session brokers.
  • Direct experience in OT/ICS environments such as manufacturing, energy, utilities, oil and gas, water, transportation, or defense.
  • Strong systems programming experience in Go, Rust, or a comparable language.
  • Solid understanding of networking fundamentals including TCP/IP, TLS, and firewalls.
  • Solid understanding of identity fundamentals including SAML, OIDC, and PKI.
  • Familiarity with the Purdue Model and IT/OT DMZ design patterns.
  • Working knowledge of OT protocols such as Modbus, DNP3, OPC-UA, and EtherNet/IP.
  • High-ownership mindset with comfort operating in a small team and solving problems proactively.
  • Experience with OT/SRA/PAM platforms such as Claroty, Dragos, Nozomi, Xona, Cyolo, Dispel, SSH PrivX OT, CyberArk, or BeyondTrust.
  • Exposure to IEC 62443, NIST SP 800-82, NERC CIP-005/007, or CMMC.
  • Background in safety-critical, regulated, or compliance-driven environments.
  • For Staff/Principal candidates: track record owning platform architecture and mentoring engineering teams.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Software Engineer, Core Experiences - Zurich, Switzerland

Speechify 51-250 Internet Software & Services

Speechify is seeking a Senior Software Engineer for its Core Experiences Team to build the foundational services and SDKs behind its cross-platform audio information product.

GCP Java Kotlin
57 minutes ago

Staff Software Engineer, Growth

PlayOn Sports is hiring a Staff Software Engineer to lead subscription growth experimentation and technical direction for its remote Growth team across NFHS Network, GoFan, and MaxPreps.

Amplitude JavaScript Node.js React Ruby on Rails Segment SQL TypeScript Vue.js
1 hour, 10 minutes ago

Senior IAM Engineer

Rubrik 1K-5K IT Services

Rubrik is hiring a Senior IAM Engineer to design and operate secure workforce identity services for its FedRAMP and cloud-based IT environment, supporting access control, compliance, and identity integration across internal and government-facing platforms.

AWS Azure GCP HIPAA OAuth OpenID Connect SAML Secrets Management Terraform
1 hour, 24 minutes ago

Software Engineer

Anduril Industries 1K-5K Aerospace & Defense

Anduril Industries is hiring a Software Engineer for its Maritime Division to build and sustain software for autonomous maritime systems across the full product lifecycle.

C++ Computer Vision Go React Rust System Design TypeScript
1 hour, 31 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers