OT Security Engineer

GlaxoSmithKline; Cambridge; Hybrid; GBP 40,000 - 80,000; Full time

Job description

Site Name: Cambridge Binney Street, Cambridge 300 Technology Square, Cambridge Park Drive
Posted Date: Mar 7 2025

This role is a Hybrid model with 3-4 days on-site per week expected between the Binney Street and Cambridge Park Drive GSK Sites.

Global Supply Chain (GSC) Research and Development (R&D) Engineering Services provides Operations and Facilities Management and Capital Projects delivery for Technical R&D sites within GSC’s Engineering and EHS organization.

This role will provide ongoing engineering support to R&D Engineering Services Operations, responsible for Facilities Services and Capital Projects program management. This will include the development and improvement of processes that support the operational delivery model and interfaces with other GSK functions, service partners and other 3rd party providers.

The purpose of this role is to hold the status of OT Cyber Security Champion, providing technical expertise to support a diversity of facilities equipment, automation and control systems across the New England cluster (4 R&D sites – 3 sites in Cambridge, MA and 1 site in Branford, CT). The role will work closely with the site operations team, automation team, capital projects and service partner organizations and it is expected to provide hands-on engineering support wherever required. The role will manage consistent execution and compliance within Automation and OT engineering programs across the sites through provision of engineering and project management skills. You will work to ensure they are aligned to the local needs and priorities of the business, and to ensure that cost, quality and compliance metrics are achieved by key contract partners.

The position will be responsible for regional compliance to external licensing and statutory requirements for engineering services provided by R&D Engineering Services.

This role will provide YOU the opportunity to lead key activities to progress YOUR career, these responsibilities include some of the following:

• Support and optimize the application of cybersecurity controls within the OT environment, to include (but are not limited to) user access management, system hardening/patching, anti-virus scanning and system configuration management.
• Technical Authority - To act as the OT Network (OTN) Technical authority on related matters where required for the cluster. Provide maintenance and lifecycle support for site automation/digital applications; with a focus on systems administration, virtualization, cross-platform integrations, and digital compliance. Help deliver projects to transition and upgrade current OTN infrastructure to meet GSK IT and cyber security standards.
• Projects - Responsible for ensuring that all projects and engineering changes at the cluster comply with the GSK OT Security standards, guidance, processes and procedures.
• OT Security Risk Management - Owning and managing site OT Security risks including reducing and maintaining risks at an acceptable level. This involves working closely with the OT Security Manager to prioritize mitigation actions in alignment with the region’s strategy and available budget.
• Technical support - Role is part of the site Operations team and is expected to provide hands-on support to the Operations team - Troubleshoot and diagnose problems within the OT network infrastructure, including virtualization hosts, server/system hardware, network switches, PLC/DCS controllers, and network devices. Role is also responsible for providing technical leadership during solution design, development, testing and implementation.
• Technical author/approver of local processes & procedures and ensure compliance with applicable GSK policies and procedures.
• To act as an advocate for OT Cybersecurity, enabling operations/projects to maximize the exploitation of technology while the OT Security is maintained. This involves working closely with the site Automation Manager to bring continuous improvements. Also support delivery of cyber security training to the site.

Why you?

Basic Qualifications:

We are looking for professionals with these required skills to achieve our goals:

• Bachelor’s degree in computer science, engineering, or science related field.
• 3 plus years’ experience supporting Automation/ICS/OT systems and infrastructure.
• Experience with Automation/ICS/OT systems (BMS, PLC, SCADA, HMI, Field Instrumentation, etc.).
• Specialist training in OT Cyber Security (SANS ICS410/ICS515 and/or ISA/IEC 62443 or equivalent) and/or experience in Cyber Security risk reduction for IT/OT infrastructure.
• Experience with IT/OT networks principles and experience with networking concepts and hardware/technologies (TCP/IP, routers, switches, network-connected devices, etc.).
• Experience managing contractor/consulting staff.

Preferred Qualifications:

If you have the following characteristics, it would be a plus:

• Experience working within Automation or Operations at life science (pharmaceutical) Manufacturing and/or R&D sites in a regulated industry (exposed to GxP & EHS requirements).
• Strong Knowledge of IT/OT infrastructure and proven experience in delivering capital projects to achieve Cyber Security risk reduction.
• Experience with enterprise firewalls & networking, (Microsoft HyperV Server, Palo Alto & Cisco preferred).
• Experience with industrial networks (e.g. Profibus, Fieldbus, Ethernet, Modbus, Bacnet and Serial comms 485, RS232 etc.).
• Experience in systems/account administration, network design, and server troubleshooting is strongly preferred.
• Leadership skills to enhance the cybersecurity mindset of the workforce on site and be the main advocate of the OT Security standards.

Please visit GSK US Benefits Summary to learn more about the comprehensive benefits program GSK offers US employees.

Why GSK?

Uniting science, technology and talent to get ahead of disease together.

GSK is a global biopharma company with a special purpose – to unite science, technology and talent to get ahead of disease together – so we can positively impact the health of billions of people and deliver stronger, more sustainable shareholder returns – as an organization where people can thrive. We prevent and treat disease with vaccines, specialty and general medicines. We focus on the science of the immune system and the use of new platform and data technologies, investing in four core therapeutic areas (infectious diseases, HIV, respiratory/immunology and oncology).

Our success absolutely depends on our people. While getting ahead of disease together is about our ambition for patients and shareholders, it’s also about making GSK a place where people can thrive. We want GSK to be a place where people feel inspired, encouraged and challenged to be the best they can be. A place where they can be themselves – feeling welcome, valued, and included. Where they can keep growing and look after their wellbeing. So, if you share our ambition, join us at this exciting moment in our journey to get Ahead Together.