Job description

Must Have Technical/Functional Skills • Hands-on experience designing, deploying, configuring, and operating Nozomi Guardian sensors and Nozomi Central Management Console (CMC) in OT/ICS environments. • Experience reviewing site IT/OT architecture, network diagrams, VLANs, SPAN/RSPAN or TAP availability, sensor placement, connectivity, sizing, and firewall prerequisites. • Ability to produce site readiness checklists, low-level designs, bills of materials, implementation plans, test evidence, and handover-to-support documentation. • Experience creating virtual machines and virtual networking for Nozomi appliances and integrating sensors with the central management platform. • Working knowledge of passive OT asset discovery, communication-flow visibility, vulnerability identification, threat/anomaly detection, policy tuning, alert triage, and PCAP/log analysis. • Experience integrating Nozomi with SIEM and enterprise platforms such as Splunk, CMDB, and ServiceNow, including ticket-driven incident, request, change, and problem workflows. • Knowledge of industrial protocols, PLCs, RTUs, HMIs, SCADA systems, engineering workstations, OT DMZs, network segmentation, and operational-safety constraints. • Experience with platform health monitoring, patching, configuration management, backup/recovery coordination, capacity monitoring, audit evidence, and vendor escalation. • Working knowledge of IEC 62443, NIST SP 800-82, secure change management, and export-controlled or regulated delivery environments. Nozomi certification is preferred. • Good to have: Palo Alto or Check Point firewalls, Cisco Catalyst switching, Zscaler ZPA, CyberArk, RunZero, ServiceNow, Windows/Linux administration, and AWS/Azure fundamentals. Roles & Responsibilities • Support Nozomi implementation across applicable Secure Connected Shop locations, covering planning, site discovery, readiness assessment, design, build, validation, stabilization, and handover to operations. • Validate as-is OT network documentation and develop the Nozomi low-level design, bill of materials, sensor-placement plan, connectivity requirements, and implementation runbook for each assigned site. • Create or coordinate the required VM and virtual networking, install and configure the Nozomi image, register the site and sensors in CMC, and validate secure connectivity. • Configure Guardian/CMC assets, zones, policies, user access, alerts, dashboards, and integrations in accordance with the approved reference architecture and site requirements. • Perform passive asset discovery and baseline validation; tune detection policies during learning and stabilization to improve asset accuracy and reduce false-positive alerts. • Integrate Nozomi alerts and asset data with Splunk SIEM, CMDB, and ServiceNow where applicable, and validate end-to-end alert and ticket flows. • Investigate Nozomi incidents and service requests using alerts, PCAPs, logs, platform diagnostics, and vendor guidance; coordinate escalations with site teams, SOC, network teams, and Nozomi product support. • Execute or coordinate approved configuration changes, patching, health checks, minor defect fixes, capacity monitoring, and availability monitoring under established change controls. • Maintain implementation evidence, asset and configuration records, test results, issue logs, risk and dependency tracking, and audit-support documentation. • Provide operational knowledge transfer, SOPs, troubleshooting guides, s tabilization support, and formal handover-to-support acceptance for each completed site. • Work within ITAR and customer security requirements, following approved access, data-handling, record-keeping, and onsite/remote delivery controls. Generic Managerial Skills, If any Strong communication, stakeholder coordination, technical documentation, problem-solving, and the ability to work independently with global OT, network, SOC, infrastructure, and site teams. Salary Range: $110,000 - $130,000 per year TCS Employee Benefits Summary: Discretionary Annual Incentive. Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans. Family Support: Maternal & Parental Leaves. Insurance Options: Auto & Home Insurance, Identity Theft Protection. Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement. Time Off: Vacation, Time Off, Sick Leave & Holidays. Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing. </div

Requirements

Must-haves

Must Have Technical/Functional Skills
Hands-on experience designing, deploying, configuring, and operating Nozomi Guardian sensors and Nozomi Central Management Console (CMC) in OT/ICS environments.
Experience reviewing site IT/OT architecture, network diagrams, VLANs, SPAN/RSPAN or TAP availability, sensor placement, connectivity, sizing, and firewall prerequisites.
Ability to produce site readiness checklists, low-level designs, bills of materials, implementation plans, test evidence, and handover-to-support documentation.
Experience creating virtual machines and virtual networking for Nozomi appliances and integrating sensors with the central management platform.
Working knowledge of passive OT asset discovery, communication-flow visibility, vulnerability identification, threat/anomaly detection, policy tuning, alert triage, and PCAP/log analysis.
Experience integrating Nozomi with SIEM and enterprise platforms such as Splunk, CMDB, and ServiceNow, including ticket-driven incident, request, change, and problem workflows.
Knowledge of industrial protocols, PLCs, RTUs, HMIs, SCADA systems, engineering workstations, OT DMZs, network segmentation, and operational-safety constraints.
Experience with platform health monitoring, patching, configuration management, backup/recovery coordination, capacity monitoring, audit evidence, and vendor escalation.
Good to have: Palo Alto or Check Point firewalls, Cisco Catalyst switching, Zscaler ZPA, CyberArk, RunZero, ServiceNow, Windows/Linux administration, and AWS/Azure fundamentals.
Roles & Responsibilities
Support Nozomi implementation across applicable Secure Connected Shop locations, covering planning, site discovery, readiness assessment, design, build, validation, stabilization, and handover to operations.
Validate as-is OT network documentation and develop the Nozomi low-level design, bill of materials, sensor-placement plan, connectivity requirements, and implementation runbook for each assigned site.
Create or coordinate the required VM and virtual networking, install and configure the Nozomi image, register the site and sensors in CMC, and validate secure connectivity.
Configure Guardian/CMC assets, zones, policies, user access, alerts, dashboards, and integrations in accordance with the approved reference architecture and site requirements.
Perform passive asset discovery and baseline validation; tune detection policies during learning and stabilization to improve asset accuracy and reduce false-positive alerts.
Integrate Nozomi alerts and asset data with Splunk SIEM, CMDB, and ServiceNow where applicable, and validate end-to-end alert and ticket flows.
Investigate Nozomi incidents and service requests using alerts, PCAPs, logs, platform diagnostics, and vendor guidance; coordinate escalations with site teams, SOC, network teams, and Nozomi product support.
Execute or coordinate approved configuration changes, patching, health checks, minor defect fixes, capacity monitoring, and availability monitoring under established change controls.
Maintain implementation evidence, asset and configuration records, test results, issue logs, risk and dependency tracking, and audit-support documentation.
Provide operational knowledge transfer, SOPs, troubleshooting guides, s tabilization support, and formal handover-to-support acceptance for each completed site.
Work within ITAR and customer security requirements, following approved access, data-handling, record-keeping, and onsite/remote delivery controls.
Generic Managerial Skills, If any

Nice-to-haves

Working knowledge of IEC 62443, NIST SP 800-82, secure change management, and export-controlled or regulated delivery environments. Nozomi certification is preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazure

Platform: careers-page
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Parental Leave