Senior Controls Engineer, OT Fleet Management

Job Summary

The Senior Controls Engineer, OT Fleet Management, is a regional technical leader responsible for advancing the security, reliability, supportability, and lifecycle health of operational technology systems across the data center fleet. The role combines deep industrial controls expertise with strong OT network, server, virtualization, database, and cybersecurity knowledge to lead Threat Vulnerability Management (TVM) execution for building management, supervisory control, power monitoring, and related OT platforms.

This engineer will translate identified vulnerabilities and technology risks into executable remediation plans, coordinate vendors and contractors performing upgrades or corrective work, validate technical outcomes, and maintain clear evidence through closure. The role also strengthens regional capability by coaching local Controls Engineers, developing practical training, and establishing repeatable methods that reduce long-term dependence on external resources.

The successful candidate is equally comfortable troubleshooting a programmable logic controller, reviewing an OT network architecture, assessing a Windows or SQL Server dependency, leading a vendor remediation call, and explaining risk and progress to technical and operational stakeholders.

Responsibilities

TVM and OT Lifecycle Management

• Own regional execution of the Controls Engineering TVM program, from technical assessment and prioritization through remediation, validation, evidence capture, and closure

• Assess vulnerabilities, obsolete components, unsupported operating systems, database dependencies, network exposures, and platform lifecycle risks affecting BMS, SCADA, PLC, historian, gateway, and related OT environments

• Develop practical remediation strategies that balance cybersecurity risk reduction, operational continuity, platform supportability, and change risk in live critical facilities

• Maintain regional remediation roadmaps, risk registers, dependencies, technical decisions, and status reporting; escalate blockers with clear options and recommended actions

• Support platform modernization, patching, upgrade, migration, and replacement planning, including rollback, validation, and operational readiness requirements

Operations Controls Engineering

• Provide advanced technical support for industrial controls and supervisory platforms

• Troubleshoot end-to-end controls issues across field devices, controllers, I/O, communications, gateways, application servers, databases, graphics, alarms, trends, and integrations

• Review controls architectures, sequences of operation, control narratives, P&IDs, electrical one-lines, network diagrams, points lists, alarm configurations, and system documentation

• Apply strong knowledge of industrial protocols such as BACnet, Modbus, OPC UA/DA, EtherNet/IP, and vendor-specific communications to diagnose and remediate system issues

• Partner with engineering and operations teams to ensure remediated systems continue to meet monitoring, alarming, control, redundancy, and data-quality requirements

OT Infrastructure and Cybersecurity

• Provide hands-on technical leadership for OT networks and server environments, including virtualization, domain and workgroup services, backup and recovery, remote access, time synchronization, certificates, and endpoint protection

• Review network segmentation, firewall rules, switch configurations, routing, addressing, redundancy, access controls, service accounts, and data flows supporting controls systems

• Coordinate with IT, cybersecurity, network, infrastructure, and operational stakeholders to resolve cross-domain dependencies while preserving appropriate ownership boundaries and site availability

• Apply secure-by-design and defense-in-depth principles to OT changes, including least privilege, controlled remote access, asset inventory, configuration management, patch governance, and recovery preparedness

• Lead technical validation after remediation, confirming system functionality, communications, alarming, trending, integrations, resilience, and documented rollback or recovery capability

Vendor, Contractor, and Program Execution

• Define scopes of work, technical requirements, acceptance criteria, test plans, and required closeout evidence for vendors, system integrators, and contractors

• Provide technical direction and oversight during remediation activities; challenge incomplete designs, unsupported assumptions, and execution plans that introduce unnecessary operational risk

• Coordinate site access, maintenance windows, change controls, testing, stakeholder communications, and handoffs for multi-site remediation efforts

• Monitor vendor delivery against scope, quality, schedule, and technical outcomes, and drive corrective action when work does not meet requirements

• Contribute technical input to forecasts, budgets, resource plans, procurement decisions, and multi-year lifecycle strategies

Training, Standards, and Knowledge Transfer

• Develop and deliver training for local and regional Controls Engineers on TVM methods, OT infrastructure fundamentals, platform lifecycle management, secure troubleshooting, and remediation validation

• Mentor engineers through live technical work, structured reviews, reusable job aids, workshops, and post-remediation lessons learned

• Create and maintain technical standards, procedures, reference architectures, remediation playbooks, and operational documentation

• Promote consistent engineering practices across sites while accounting for regional regulations, platform differences, site constraints, and operational maturity

• Share patterns, risks, and lessons across regions to improve global controls engineering capability and fleet-level decision making

Qualifications

Required

• Bachelor’s degree in controls engineering, electrical engineering, computer engineering, automation, or a related technical discipline, or equivalent practical experience

• Proven years of progressive experience in industrial controls, automation, BMS, SCADA, or OT engineering, including work in operational or mission-critical environments

• Demonstrated experience with at least two major industrial controls platforms, with practical exposure to platforms such as Rockwell Automation, Siemens, ABB, Ignition, AVEVA System Platform, or Schneider Electric

• Strong knowledge of PLCs, BMS/SCADA applications, HMIs, historians, gateways, controls networks, field instrumentation, alarming, trending, and system integration

• Advanced working knowledge of OT infrastructure, including Windows Server, SQL Server, TCP/IP networking, VLANs, firewalls, routing, switching, virtualization, backup/recovery, identity and access, and remote support technologies

• Experience assessing and remediating vulnerabilities or lifecycle risks in OT environments, including patching, upgrades, unsupported software, legacy operating systems, database dependencies, and compensating controls

• Experience directing vendors, contractors, or system integrators through technically complex, multi-site remediation or modernization work

• Ability to create clear technical scopes, implementation plans, test procedures, acceptance criteria, risk assessments, and executive-ready status updates

• Demonstrated ability to train, mentor, and influence engineers and cross-functional stakeholders without relying on direct authority

• Strong written and verbal communication skills, sound judgment in live operational environments, and the ability to manage several priorities with disciplined follow-through

• Ability to travel regionally and internationally as required to support site assessments, remediation execution, and training

Preferred

• Experience in data centers, critical facilities, manufacturing, utilities, pharmaceuticals, energy, or other high-availability industrial environments

• Knowledge of OT cybersecurity practices and frameworks, including IEC 62443, NIST Cybersecurity Framework, NIST SP 800-82, or equivalent industry guidance

• Relevant certifications in industrial automation, networking, Windows or cloud infrastructure, virtualization, cybersecurity, or project/program management

• Experience with change management, incident response, root-cause analysis, configuration management, ServiceNow or comparable work-management platforms, and audit evidence collection

• Experience operating within a global, matrixed organization and coordinating delivery across multiple countries, time zones, and technical disciplines