OT Security Engineer (Hybrid/Remote)

OT Cybersecurity Engineer

Location: Bethesda, MD (Hybrid – 3 days onsite)
Employment Type: Long-term contract or contract-to-hire
Clearance: Must be able to pass a standard background check and obtain a Public Trust Clearance

Work Authorization: U.S. Citizenship required

Macro Pros has an immediate opening for an OT Cybersecurity Engineer to support the security of Operational Technology (OT) environments, including building automation, utilities, and other critical facilities systems. This role supports a client in Bethesda, Maryland.

Candidates must currently live in the Washington, DC metro area and be willing to work onsite in Bethesda three days per week.

What You’ll Do:

Assist with inventory and documentation of OT/ICS assets and networks
Maintain OT network and data flow diagrams, including segmented zones
Support monitoring of OT network segments for unusual or suspicious activity
Help triage OT-related security alerts and coordinate with cybersecurity and facilities teams
Assist with vulnerability tracking, patching/firmware planning, and basic system hardening
Contribute to OT risk assessments, security documentation, and compliance efforts (e.g., NIST-based controls)
Work with facilities, biomedical/clinical engineering teams, and vendors to plan secure changes and maintenance activities

Hands-On Experience With:

OT, controls, or building/facility systems (BAS/BMS, HVAC, utilities, PLCs)
IT and cybersecurity fundamentals (networking, firewalls, monitoring, vulnerability management)
Core networking and security concepts (TCP/IP, segmentation, least privilege, logging)
Clear technical documentation and communication with both technical and non-technical teams

Preferred Qualifications:

Minimum of 6 years of federal government experience
Experience with OT or industrial systems (building automation, power/backup systems, lab or facility controls)
Experience with OT/industrial protocols (BACnet, Modbus)
Knowledge of security frameworks (NIST SP 800-82, NIST SP 800-53, CIS Controls)
Entry-level certifications such as Security+, Network+, CySA+, or OT/ICS-focused training
Experience with OT security platforms (Nozomi, Dragos, Claroty)
Familiarity with federal security frameworks (FedRAMP, FISMA, RMF, NIST CSF, NIST SP 800-series)

Basic Qualifications:

Bachelor’s degree in cybersecurity, computer science, engineering (mechanical, electrical, controls, systems), IT, or a related field
or an equivalent combination of education, training, and experience

Work Environment:

Onsite in Bethesda three days per week (flexible on days) and two days remote
Occasional off-hours work to support maintenance windows or incident response
Regular access to mechanical rooms, plants, labs, and clinical areas (PPE and safety procedures required)