Job description

Donaldson is committed to solving the world’s most complex filtration challenges. Together, we make cool things. As an established technology and innovation leader, we are continuously evolving to meet the filtration needs of our changing world. Join a culture of collaboration and innovation that matters and a chance to learn, effect change, and make meaningful contributions at work and in communities. The Principal OT Security Engineer defines enterprise OT cybersecurity strategy, architecture, and a technical roadmap, leading complex initiatives across global manufacturing, distribution, and lab operations. Qualified candidates must be able to work a hybrid schedule at our Bloomington, MN office. Role Responsibilities Define and drive enterprise OT security architecture and standards Lead large-scale OT security initiatives (segmentation, monitoring, secure remote access) Establish OT cybersecurity policies aligned with IEC 62443, NIST, and regulatory requirements Partner with manufacturing, distribution, engineering, and leadership to align security with uptime and resilience goals Lead remediation of high-impact security risks and vulnerabilities Representing OT security in audits and executive discussions Influence long-term strategy, roadmap planning, and maturity improvements Travel: Up to 20% Minimum Qualifications Bachelor’s degree and 8 years of cybersecurity experience OR a high school diploma/GED and 12 years of cybersecurity experience Significant OT/ICS experience Deep expertise in industrial cybersecurity architecture and risk management Preferred Qualifications Experience leading enterprise OT security programs in global manufacturing environments Proven track record working with executive leadership and driving strategic initiatives Deep experience with regulatory and compliance frameworks (IEC 62443, NIST, ISO 27001, TISAX, CMMC) Experience with OT security tools (Nozomi, Claroty, Dragos, etc.) Experience leveraging AI tools to improve the effectiveness of a security tool or mechanism Executive-level communication skills, both verbal and written, capable of articulating technical topics to a wide range of stakeholders to drive understanding and alignment Preferred Certifications CISSP CISM or CRISC GICSP SANS ICS certifications (e.g., GRID, GCIP) Annual Salary Range: $111,840-$139,800.  Actual salaries will vary based on several factors including, but not limited to applicable work experience, training, education, performance. This position is eligible for annual incentive plan based on performance and company growth. Employee benefits are part of the competitive total rewards package that Donaldson Company, Inc. provides to you. Our comprehensive benefits program includes health benefits, retirement plan (401k), paid time away, paid leaves (including paid parental leave) and more. #LI-Hybrid Employment opportunities for positions in the United States may require use of information which is subject to the export control regulations of the United States. Hiring decisions for such positions are required by law to be made in compliance with these regulations. Applicants for employment opportunities in other countries must be able to meet the comparable export control requirements of that country and of the United States. Donaldson Company has been made aware that there are several recruiting scams that are targeting job seekers. These scams have attempted to solicit money for job applications and/or collect confidential information, Donaldson will never solicit money during the application or recruiting process. Donaldson only accepts online applications through our Careers | Donaldson Company, Inc. website and any communication from a Donaldson recruiter would be sent using a donaldson.com email address. If you have any questions about the legitimacy of an employment opportunity, please reach out to talentacquisition donaldson.com to verify that the communication is from Donaldson. Our policy is to provide equal employment opportunities to all qualified persons without regard to race, gender, color, disability, national origin, age, religion, union affiliation, sexual orientation, veteran status, citizenship, gender identity and/or expression, or other status protected by law.

Requirements

Must-haves

Role Responsibilities
Define and drive enterprise OT security architecture and standards
Lead large-scale OT security initiatives (segmentation, monitoring, secure remote access)
Establish OT cybersecurity policies aligned with IEC 62443, NIST, and regulatory requirements
Partner with manufacturing, distribution, engineering, and leadership to align security with uptime and resilience goals
Lead remediation of high-impact security risks and vulnerabilities
Representing OT security in audits and executive discussions
Influence long-term strategy, roadmap planning, and maturity improvements
Travel: Up to 20%
Bachelor’s degree and 8 years of cybersecurity experience OR a high school diploma/GED and 12 years of cybersecurity experience
Significant OT/ICS experience
Deep expertise in industrial cybersecurity architecture and risk management
CISM or CRISC
SANS ICS certifications (e.g., GRID, GCIP)

Nice-to-haves

Experience leading enterprise OT security programs in global manufacturing environments
Proven track record working with executive leadership and driving strategic initiatives
Deep experience with regulatory and compliance frameworks (IEC 62443, NIST, ISO 27001, TISAX, CMMC)
Experience with OT security tools (Nozomi, Claroty, Dragos, etc.)
Experience leveraging AI tools to improve the effectiveness of a security tool or mechanism
Executive-level communication skills, both verbal and written, capable of articulating technical topics to a wide range of stakeholders to drive understanding and alignment
Preferred Certifications

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

401k

Parental Leave