Implement defense-in-depth segmentation aligned to the Purdue model and ISA/IEC 62443 zone-and-conduit design, including VLANs, rulesets, micro segmentation, and virtual patching for legacy assets. Deploy, configure, and tune OT security platforms across manufacturing sites, including endpoint protection, inline IPS, asset discovery, secure remote access, media scanning kiosks, and PLC backup.