Operational Technology Security Engineer

Job Summary

Join Eliassen Group as an Operational Technology Security Engineer based in Boise, Ada County, US. This permanent, fully remote role supports government clients by protecting industrial and OT environments.

Key Responsibilities

• Design, implement, and maintain security controls for OT systems in accordance with DoD and industry standards.
• Conduct risk assessments, vulnerability scans, and threat modeling for SCADA, PLC, and other industrial control systems.
• Monitor OT networks for anomalies, respond to incidents, and provide forensic analysis.
• Develop and deliver security hardening guidelines, policies, and training for engineering teams.
• Collaborate with cross‑functional teams to integrate security solutions into existing operational workflows.
• Maintain documentation, reporting, and compliance evidence for audits and certifications.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Engineering, or related field (or equivalent experience).
• 5+ years of experience securing operational technology or industrial control systems.
• Hands‑on knowledge of DoD RMF, NIST 800‑53, IEC 62443, and other relevant frameworks.
• Proficiency with firewalls, IDS/IPS, SIEM, and endpoint protection tools specific to OT environments.
• Strong scripting skills (Python, PowerShell) for automation and monitoring.
• Security certifications such as GICSP, CISSP, or CEH are a plus.

What We Offer

• Competitive salary: $93,637.70 annually
• Fully remote work arrangement with flexible hours.
• Opportunities to work on high‑impact government projects.
• Professional development and certification support.

Frequently Asked Questions

Is this position fully remote?

Yes, the role is 100% remote, allowing you to work from anywhere while being based in Boise, Ada County.

What security frameworks will I work with?

You will apply DoD RMF, NIST 800‑53, IEC 62443, and other industry standards to protect OT environments.

What certifications are preferred?

Certifications such as GICSP, CISSP, or CEH are preferred but not mandatory.