Staff OT Security Engineer at lilasciences

Compensation

$140,000 – $186,667/yr

Setup: Hybrid
Location: Cambridge, Minnesota
Type: Full-time
Level: not_specified
Posted: Jul 28, 2026

Description

Lila Sciences is looking for a Staff OT Security Engineer to lead the security engineering of their Operational Technology (OT) environment. This includes translating OT security architecture into operational controls across various aspects like segmentation, identity, privileged access, vendor access, detection, response, and lifecycle management. The role involves close collaboration with multiple teams and setting technical direction within the domain.

Required Skills

cybersecurity
infrastructure engineering
systems integration
OT security engineering
segmentation
identity
access control
compensating controls
secure remote access patterns
networking

Additional Information

Required Previous Experiences: Significant hands-on experience in cybersecurity, infrastructure engineering, systems integration, or OT security engineering in operationally constrained environments.
Experience designing and implementing security controls in OT, industrial control systems, laboratory automation, manufacturing, infrastructure, or similarly constrained environments.
Preferred Qualifications: Experience in life sciences, biotechnology, pharmaceutical, laboratory automation, manufacturing, or high-throughput research environments.
Familiarity with IEC 62443, NIST SP 800-82, NIST CSF, GxP, 21 CFR Part 11, ISO 9001, or comparable quality and security frameworks.
Experience with OT visibility platforms such as Claroty, Tenable OT, Dragos, Nozomi Networks, or comparable tools.
Experience with PKI, TLS/mTLS, TPM-bound credentials, certificate lifecycle management, or modern machine identity patterns.
Experience with privileged access management platforms such as CyberArk, Delinea, HashiCorp Vault, or comparable tools.
Background in product security, embedded security, IoT security, secure-at-ship programs, or shift-left security practices.
Practical scripting or automation experience with Python, PowerShell, APIs, or infrastructure-as-code tooling.
Relevant OT or security certifications such as GICSP, IEC 62443 Cybersecurity Expert, GIAC GRID, GCIH, CISSP, or similar credentials.