Senior/Staff/Principal SWE - OT Security Engineering

3 months, 3 weeks ago
Full-time
Senior
Software Development
Appgate

Appgate

Appgate is the secure access company empowering secure connections with Zero Trust principles for people, devices, and systems.

Professional Services
251-1K
Founded 2020

Description

  • Design and implement secure remote access capabilities for AppGate's OT platform.
  • Build backend services across the Controller, Gateway, and Connector components in a distributed architecture.
  • Develop and maintain REST and gRPC APIs for policy evaluation, access control, protocol registry management, and OT integrations.
  • Create protocol-aware policy authoring for industrial protocols such as Modbus TCP, DNP3, IEC 61850, OPC-UA, and EtherNet/IP.
  • Implement evidence and audit logging that supports compliance and can be forwarded to tools such as Splunk, Kinesis, and Datadog.
  • Deliver session governance features including session recording, keystroke logging, step-up authentication, and approval workflows.
  • Integrate with OT visibility platforms and normalize asset context into policy-ready attributes.
  • Work with industrial assets such as PLCs, RTUs, HMIs, and historians in OT environments.
  • Own features end-to-end from architecture through production deployment in customer environments.
  • Define technical direction, lead architecture reviews, and support hiring as the team scales to 5–7 engineers.

Requirements

  • Hands-on experience building or operating secure remote access systems such as VPNs, ZTNA, jump servers, privileged access tools, or session brokers.
  • Direct experience in OT/ICS environments such as manufacturing, energy, utilities, oil and gas, water, transportation, or defense.
  • Strong systems programming experience in Go, Rust, or a comparable language.
  • Solid understanding of networking fundamentals including TCP/IP, TLS, and firewalls.
  • Solid understanding of identity fundamentals including SAML, OIDC, and PKI.
  • Familiarity with the Purdue Model and IT/OT DMZ design patterns.
  • Working knowledge of OT protocols such as Modbus, DNP3, OPC-UA, and EtherNet/IP.
  • High-ownership mindset with comfort operating in a small team and solving problems proactively.
  • Experience with OT/SRA/PAM platforms such as Claroty, Dragos, Nozomi, Xona, Cyolo, Dispel, SSH PrivX OT, CyberArk, or BeyondTrust.
  • Exposure to IEC 62443, NIST SP 800-82, NERC CIP-005/007, or CMMC.
  • Background in safety-critical, regulated, or compliance-driven environments.
  • For Staff/Principal candidates: track record owning platform architecture and mentoring engineering teams.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Software Engineer, Backend (Loan Origination and Reporting)

Affirm 1K-5K Diversified Financial Services

Affirm is hiring a Senior Software Engineer to build and scale real-time loan origination data platforms and reporting services that support its financial operations and partners.

Apache Airflow Apache Spark AWS Kotlin Kubernetes MySQL Python
8 hours, 48 minutes ago

Senior Information Security Infrastructure Engineer - Security Architecture - InfoSec

Elastic 1K-5K Internet Software & Services

Elastic is hiring a Senior Information Security Infrastructure Engineer for its InfoSec Security Architecture team to ingest security telemetry into Elasticsearch and maintain the clusters and pipelines that support detection, incident response, and security consulting.

Elasticsearch GitHub GitHub Actions Helm Kubernetes Python REST API Terraform
8 hours, 48 minutes ago

Cybersecurity Specialist (DISA)

Horizon Industries Limited is seeking a Cybersecurity Specialist to support DISA enterprise software systems remotely in the USA, providing security engineering and information assurance support in an agile environment.

Agile Bash Cybersecurity Linux Perl SIEM SQL Windows Server
8 hours, 48 minutes ago

Senior Software Engineer, ASW Launch Ops

Skyline Eco-Adventures 11-50 Hotels, Restaurants & Leisure

Zipline is hiring a Senior Software Engineer for its ASW Launch Ops team to build and scale the operational platform that manages new-market site development, deployment, and launch readiness for its global autonomous delivery network.

AWS CI/CD Go Grafana gRPC Honeycomb Kafka PostgreSQL Python React
9 hours, 3 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers