OT Security Technical Lead at Crownholdings

Job description

About Crown Crown Holdings, Inc. through it s subsidiaries, is a world leader in the metal packaging production process. We design and manufacture a wide range of innovative and sustainable metal packaging solutions and products. Our clients are some of the largest and most respected companies in the world. Crown is dedicated to building a team of highly talented, dedicated, and driven individuals. It s an exciting time to join our business because Crown offers you the opportunity to grow and develop your skills in an expanding industry. Crown was founded with the goal of valuing and promoting sustainability and this vision continues to be essential to our long-term future. Job Description: About the Company Crown Holdings, Inc. is a global leader in the design, manufacture, and sale of packaging products for consumer goods. At Crown, we are passionate about helping our customers build their brands and connect with consumers around the world. We do this by delivering innovative packaging that offers significant value for brand owners, retailers, and consumers alike. With operations in 39 countries employing over 23,000 people and net sales of over $11 billion, we are uniquely positioned to bring best practices in quality and manufacturing to our customers to drive their businesses locally and globally. Sustaining a leadership position requires us to build a team of highly talented, dedicated, and driven individuals. About the Team The Global Information Security Team’s mission is “protect Crown’s global information systems, data and employees from cyber-based security threats while ensuring the confidentiality, integrity and availability of information used by the Crown business units to produce world class sustainable packaging solutions to our customers”. You will join a fun, cohesive and collaborative team who love what they do and are committed to creating a safe and secure environment for the Crown family. Our team is nimble, lean and have dynamic backgrounds that foster an environment of continuous learning and growth. Location Yardley, PA (USA) or Wantage (UK). This is an office-based position, and individuals are expected to be in the office daily. Crown offers a flexible work hour schedule. About the Position The OT Security Technical Lead is responsible for designing, implementing, and continuously improving cybersecurity controls across Crown’s global manufacturing OT environments, including industrial control systems, factory automation systems, and other OT technologies as needed. The role combines OT-security engineering, architecture, technical leadership, and cross-functional partnership to reduce cyber risk while safeguarding personnel, production continuity, and product quality. Partnering with the regional IT teams, manufacturing plant personnel and the rest of the Global Security Team, they will implement and maintain OT security solutions and ensure all OT related systems are securely configured to protect against current and emerging cyber threats and align with Crown security standards. Responsibilities Engineering & Technical Leadership (40%): Develop and implement security controls for OT assets such as PLCs, RTUs, HMIs, engineering workstations, historians, SCADA systems, DCS platforms, and industrial network equipment. Serve as the lead technical subject matter expert (SME) throughout the implementation of OT related security solutions and changes, including defining standard processes and authoring detailed technical guides to enable smooth transition to an operational state. Function as a subject matter expert (SME) for Crown’s OT security solutions, helping ensure they are managed and maintained in accordance with Crown and industry standards and continue to meet current and future requirements. Proactively identify OT related security configuration issues across the enterprise and coordinate timely remediation with minimal operational impact. Help maintain accurate inventories of OT assets, including PLCs, RTUs, HMIs, engineering workstations, SCADA servers, and industrial network devices. Participate in OT incident response, including triage, containment, recovery, root-cause analysis, and lessons-learned activities. Perform vulnerability assessments and support remediation planning for OT systems, considering operational uptime, safety, vendor guidance, and maintenance windows. Strategy and Architecture Design (30%): Define and maintain the target OT cybersecurity architecture, roadmap, standards, and reference designs. Work with the Network Security Architect to design secure network segmentation and zoning strategies for industrial environments, aligned with the Purdue Model, ISA-95, and ISA/IEC 62443 principles. Conduct OT security architecture reviews, threat modeling, risk assessments, and security gap analyses. Identify, assess, and select global OT security related solutions and changes that improve Crown’s OT cybersecurity posture across its global operations. Produce detailed designs and implementation plans to ensure new OT security solutions and changes are robust, resilient, and well integrated into Crown’s environment while minimizing operational impact. Stakeholder Collaboration and Consulting (30%): Work with regional IT teams, plant engineers and operators to ensure security controls are feasible, maintainable, and do not compromise production or safety. Support other projects and initiatives to ensure OT related components and changes are securely configured and in line with Crown security standards. Requirements Crown seeks an experienced and driven OT Security Technical Lead to drive improvement in Crown’s overall OT security by designing and engineering resilient, secure solutions and controls and coordinating their implementation across its global manufacturing environment. Technical Expertise: 5 years of experience in OT/ICS engineering, industrial automation, cybersecurity or a related field. Experience of designing and/or implementing security controls/solutions for OT, industrial control systems or components (PLC, HMI, SCADA etc) Strong practical understanding of industrial control systems and communications protocols, including EtherNet/IP, CIP, S7 communication, Modbus, DNP3, OPC Classic/OPC UA, PROFINET, and BACnet. Proficient in OT network architecture and security controls, including network segmentation, firewalls, industrial DMZs, secure remote access, and secure communications. Demonstrated ability to identify, assess, and remediate OT related security risks, vulnerabilities, and configuration weaknesses. Hands-on experience with OT security platforms such as Nozomi Networks, Claroty, Dragos, Microsoft Defender for IoT, Tenable OT, or comparable technologies. Familiarity with major industrial automation vendors and technologies, including Siemens, Rockwell Automation, Schneider Electric, Honeywell, Emerson and GE. Experience serving as a technical lead on large-scale projects involving geographically distributed and cross-cultural teams. Demonstrated experience defining and implementing security standards, processes, and governance within large corporate IT environments. Working knowledge of OT security frameworks and standards, including ISA/IEC 62443, NIST SP 800-82, and the Purdue Enterprise Reference Architecture (PERA). Core Competencies: Strategic thinker; understands complex business needs and translates them into secure, technically sound, actionable plans. Quality driven and detail oriented, with advanced problem solving and troubleshooting skills. Strong organizational and prioritization skills; effectively manages competing tasks and consistently meets project deadlines. Excellent communication skills; translates technical concepts for diverse audiences and influences technical stakeholders through evidence-based recommendations. Proactive and self-directed; anticipates risks, identifies opportunities for improvement, and takes timely action to resolve issues before they affect delivery or security outcomes. Personable and relationship-focused; builds trusted, productive working relationships across teams, stakeholders, countries, and cultures to enable effective collaboration and shared outcomes. Education & Certifications: Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or equivalent experience. Preferred certifications: GICSP, GRID, ISA/IEC 62443 Cybersecurity Expert or similar. TOGAF certification would also be desirable. What Crown Offers You Strong engagement and commitment to the safety of our employees The opportunity to build a meaningful career Professional and personal development through training and work experiences Join us and become part of a team of professionals who are passionate about sustainable packaging! Working Together Working Together is one of the five pillars that make up our Twentyby30™ program. We aim to value and respect each individual and foster an environment of inclusivity.

Requirements

Must-haves

Crown was founded with the goal of valuing and promoting sustainability and this vision continues to be essential to our long-term future.
Develop and implement security controls for OT assets such as PLCs, RTUs, HMIs, engineering workstations, historians, SCADA systems, DCS platforms, and industrial network equipment.
Proactively identify OT related security configuration issues across the enterprise and coordinate timely remediation with minimal operational impact.
Help maintain accurate inventories of OT assets, including PLCs, RTUs, HMIs, engineering workstations, SCADA servers, and industrial network devices.
Participate in OT incident response, including triage, containment, recovery, root-cause analysis, and lessons-learned activities.
Perform vulnerability assessments and support remediation planning for OT systems, considering operational uptime, safety, vendor guidance, and maintenance windows.
Define and maintain the target OT cybersecurity architecture, roadmap, standards, and reference designs.
Work with the Network Security Architect to design secure network segmentation and zoning strategies for industrial environments, aligned with the Purdue Model, ISA-95, and ISA/IEC 62443 principles.
Conduct OT security architecture reviews, threat modeling, risk assessments, and security gap analyses.
Identify, assess, and select global OT security related solutions and changes that improve Crown’s OT cybersecurity posture across its global operations.
Produce detailed designs and implementation plans to ensure new OT security solutions and changes are robust, resilient, and well integrated into Crown’s environment while minimizing operational impact.
Work with regional IT teams, plant engineers and operators to ensure security controls are feasible, maintainable, and do not compromise production or safety.
Support other projects and initiatives to ensure OT related components and changes are securely configured and in line with Crown security standards.
5 years of experience in OT/ICS engineering, industrial automation, cybersecurity or a related field.
Experience of designing and/or implementing security controls/solutions for OT, industrial control systems or components (PLC, HMI, SCADA etc)
Strong practical understanding of industrial control systems and communications protocols, including EtherNet/IP, CIP, S7 communication, Modbus, DNP3, OPC Classic/OPC UA, PROFINET, and BACnet.
Proficient in OT network architecture and security controls, including network segmentation, firewalls, industrial DMZs, secure remote access, and secure communications.
Demonstrated ability to identify, assess, and remediate OT related security risks, vulnerabilities, and configuration weaknesses.
Hands-on experience with OT security platforms such as Nozomi Networks, Claroty, Dragos, Microsoft Defender for IoT, Tenable OT, or comparable technologies.
Familiarity with major industrial automation vendors and technologies, including Siemens, Rockwell Automation, Schneider Electric, Honeywell, Emerson and GE.
Experience serving as a technical lead on large-scale projects involving geographically distributed and cross-cultural teams.
Demonstrated experience defining and implementing security standards, processes, and governance within large corporate IT environments.
Working knowledge of OT security frameworks and standards, including ISA/IEC 62443, NIST SP 800-82, and the Purdue Enterprise Reference Architecture (PERA).

Nice-to-haves

Preferred certifications: GICSP, GRID, ISA/IEC 62443 Cybersecurity Expert or similar.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

rest

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Vision