Senior Information Security Engineer - OT/IoT & Operational Technology (OT) Security

POSITION OVERVIEW

The Senior Information Security Engineer - OT/IoT Security is responsible for leading the design, implementation, and ongoing management of cybersecurity controls across QTS operational technology (OT), industrial control systems (ICS), and IoT environments.

This role focuses on protecting critical infrastructure systems supporting data center operations, including building management systems (BMS), electrical/mechanical control systems, environmental monitoring platforms, and connected operational devices.

The engineer ensures that OT/IoT security solutions align with QTS architectural standards, compliance requirements, and evolving threat models targeting industrial and cyber-physical systems. As risks evolve, this role is responsible for recommending enhancements that strengthen resilience across converged IT/OT environments.

While not a people management role, this position serves as a technical leader and subject matter expert, partnering closely with Security Architecture, Facility Operations, Engineering, and Technology teams to advance QTS's security posture across operational environments.

RESPONSIBILITIES

Other duties may be assigned

OT / ICS Security Engineering

• Lead the design, deployment, and lifecycle management of security controls for OT, ICS, and IoT environments.
• Secure critical data center infrastructure systems, including BMS, EPMS, DCIM, PLCs, SCADA components, and industrial network segments.
• Define and enforce network segmentation strategies between IT and OT environments (zones/conduits).
• Implement and maintain secure remote access solutions for vendors and operational support teams.

Monitoring & Threat Detection

• Develop and maintain visibility across OT networks, including asset inventory, network flows, and anomalous behavior detection.
• Integrate OT telemetry into enterprise monitoring platforms (e.g., SIEM, SOAR) where appropriate.
• Partner with SOC teams to develop OT-specific detection use cases and incident playbooks.

Vulnerability & Risk Management

• Establish and maintain OT vulnerability management practices, including asset profiling, passive scanning, and vendor coordination.
• Assess exploitability and operational risk for OT assets (e.g., controllers, embedded devices, facility systems).
• Define risk-based remediation strategies considering uptime, safety, and operational constraints.

Incident Response & Resilience

• Support and lead OT-related incident investigations, containment, and recovery efforts.
• Develop OT-specific response plans aligned with safety and operational continuity requirements.
• Participate in tabletop and post-incident exercises with cross-functional teams.

Architecture & Project Leadership

• Lead OT/IoT security design reviews for new builds, retrofits, and expansion projects.
• Collaborate with facility engineering, construction, and vendors to embed security in design ("secure by design").
• Drive security standards for third-party integrations, vendor systems, and supply chain risk.

Compliance & Standards Alignment

• Implement controls aligned with frameworks such as NIST CSF, NIST 800-82, IEC 62443, CIS, SOC 2, PCI, and other applicable standards.
• Support audits and evidence collection related to OT/security controls.

Collaboration & Leadership

• Serve as a trusted partner to Facility Operations, Engineering, and Technology teams.
• Lead technical discussions and influence security decisions across IT/OT convergence initiatives.
• Promote a culture of security aligned with QTS core values and servant leadership principles.

BASIC QUALIFICATIONS

• 10+ years of experience in cybersecurity, with strong engineering background in network, systems, or OT security.
• Demonstrated experience securing industrial environments, IoT systems, or critical infrastructure.
• Experience with OT/ICS technologies such as PLCs, SCADA, BMS/EPMS/DCIM, or industrial protocols (Modbus, BACnet, DNP3, etc.).
• Strong knowledge of OT network segmentation, secure architectures, and zero trust principles.
• Experience with vulnerability management and risk evaluation in constrained or uptime-sensitive environments.
• Ability to translate cybersecurity risk into business and operational impact.
• Proven track record of ownership, accountability, and collaboration across teams.

PREFERRED QUALIFICATIONS

• Experience in data center or critical infrastructure environments.
• Familiarity with NIST 800-82, IEC 62443, or other OT-specific frameworks.
• Experience integrating OT environments into SIEM/SOAR platforms.
• Scripting experience (Python, PowerShell, etc.) for automation and data analysis.
• Relevant certifications (CISSP, GICSP, GRID, GCIP, CCSP, etc.).

KNOWLEDGE, SKILLS, AND ABILITIES

• Deep understanding of IT/OT convergence challenges and security controls.

• Strong analytical and problem-solving skills in high-availability environments.

• Ability to lead cross-functional initiatives without direct authority.

• Experience with security technologies such as:

• Network security and segmentation (firewalls, NAC, microsegmentation)

• SIEM, EDR, IDS/IPS, and threat intelligence platforms

• Identity and privileged access controls in hybrid environments

• Strong communication skills with both technical and non-technical stakeholders.

• Commitment to continuous learning, innovation, and operational excellence.

QTS CULTURE & VALUES EXPECTATIONS

At QTS, we expect all team members to:

• Demonstrate integrity, accountability, and a commitment to excellence.
• Operate with a team-first mindset and collaborate across disciplines.
• Deliver secure, reliable solutions that support our customers and communities.
• Embody servant leadership by supporting others and contributing to a culture of trust and belonging.

TOTAL REWARDS

• Competitive compensation and bonus eligibility
• Comprehensive benefits package including medical, dental, vision, life, and disability insurance
• 401(k) with company match
• Paid time off, holidays, and volunteer days
• Tuition assistance, parental leave, and wellness programs
• Employee-focused programs that support financial, physical, and community well-being

We conform to all the laws, statutes, and regulations concerning equal employment opportunities and affirmative action. We strongly encourage women, minorities, individuals with disabilities and veterans to apply to all of our job openings. We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, or national origin, age, disability status, Genetic Information & Testing, Family & Medical Leave, protected veteran status, or any other characteristic protected by law. We prohibit retaliation against individuals who bring forth any complaint, orally or in writing, to the employer or the government, or against any individuals who assist or participate in the investigation of any complaint or discrimination claim.

The "Know Your Rights" Poster is included here:

Know Your Rights (English)

Know Your Rights (Spanish)

The pay transparency policy is available here:

Pay Transparency Nondiscrimination Poster-Formatted

QTS is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e-mail to talentacquisition@qtsdatacenters.com and let us know the nature of your request and your contact information.