Senior Technical Account Manager, OT Cybersecurity

About this role

The Senior Technical Account Manager (TAM) is a practitioner-level technical leader for our most strategic customers operating Operational Technology (OT) and Industrial Control System (ICS) environments across sectors such as energy and utilities, manufacturing, oil and gas, water, and critical infrastructure. You will own the technical relationship end to end, ensuring our cybersecurity platform is architected, deployed, and operated correctly in environments where availability and safety come first.
This is not a relationship-only role. We are looking for someone who has spent real time in plants, substations, and control rooms; who can read a network diagram and spot the flat Level 2 network, the dual-homed engineering workstation, or the unmanaged vendor remote-access path; and who can sit with both a controls engineer and a CISO and earn the trust of each. Ideally, you have done this work at an OT cybersecurity company and understand how security products succeed or fail in the field.
As an Advanced (IC5) individual contributor, you will operate with a high degree of autonomy, lead the most complex deployments and escalations, set technical standards for the TAM function, and mentor other TAMs and customer-facing engineers.
Requirements
Strategic Customer Technical Ownership

• Serve as the senior technical owner for a portfolio of large enterprise and critical infrastructure customers, including multi-site and multi-region deployments

• Build trusted-advisor relationships across OT/controls engineering, plant operations, IT/network teams, security operations, and executive leadership (CISO, VP Operations, Plant Managers)

• Develop and maintain a deep, documented understanding of each customer’s OT architecture, asset inventory, network topology, vendor ecosystem, and risk posture

• Lead executive business reviews and technical roadmap sessions that tie platform adoption to measurable risk reduction and operational outcomes
OT Architecture & Secure Deployment

• Design and validate deployments aligned to the Purdue Enterprise Reference Architecture and ISA/IEC 62443 zones and conduits, including placement in industrial DMZs (Level 3.5)

• Guide customers through deployments that touch PLCs, RTUs, HMIs, historians, engineering workstations, and safety systems from vendors such as Rockwell, Siemens, Schneider Electric, Honeywell, Emerson, ABB, and GE

• Plan and execute changes within customer change-management, maintenance-window, and management-of-change (MOC) processes, with zero tolerance for unplanned operational impact

• Advise on secure third-party and vendor remote access, privileged access, and zero trust architectures for OT
Networking & Advanced Troubleshooting

• Act as the final technical escalation point for complex issues spanning network, identity, security, and platform layers

• Troubleshoot hands-on at the packet level (e.g., Wireshark/tcpdump), across routing, switching, VLANs, NAT, firewalls, VPNs (IPsec/TLS), DNS, and certificate/PKI issues

• Diagnose behavior of industrial protocols such as Modbus TCP, DNP3, EtherNet/IP (CIP), PROFINET, OPC UA/DA, IEC 61850, and IEC 60870-5-104, and understand how security controls affect them

• Lead root-cause analysis and incident post-mortems, and drive durable fixes with Support, Engineering, and the customer
Cybersecurity Advisory & Compliance

• Advise customers on OT security program maturity, segmentation strategy, access control, monitoring, and incident response readiness

• Help customers map platform capabilities to frameworks and regulations including ISA/IEC 62443, NIST SP 800-82, NIST CSF, NERC CIP, TSA security directives, and CISA guidance

• Stay current on the ICS threat landscape (e.g., threat groups, ICS-specific malware, CISA ICS advisories) and translate it into practical recommendations for customers

• Support customer audits, assessments, and security questionnaires with accurate, defensible technical detail
Technical Leadership & Cross-Functional Influence

• Represent the voice of the customer to Product and Engineering with well-structured, prioritized field insights and requirements grounded in real OT use cases

• Partner with Sales and Account Management as the lead technical voice on renewals, expansions, and complex upsells

• Author and own reference architectures, deployment playbooks, runbooks, and best-practice guides used across the TAM and Support teams

• Mentor and coach other TAMs and customer-facing engineers; help raise the technical bar of the function

Qualifications
Required

• Experience 7+ years in technical customer-facing or hands-on engineering roles (e.g., Technical Account Manager, Sales/Solutions Engineer, OT Security Engineer, Controls/Automation Engineer, ICS Network Engineer, or Professional Services Consultant), with a meaningful portion focused on OT/ICS

• OT / ICS Practitioner-level, hands-on experience in industrial environments — configuring, supporting, or securing PLCs, HMIs, SCADA/DCS systems, historians, and engineering workstations in live production settings. You understand why availability, safety, and change control drive every decision in OT

• Cybersecurity Deep, hands-on experience deploying and operating security controls in OT and IT environments, such as secure remote access, zero trust network access, privileged access management, network segmentation, firewalls, and OT asset visibility/threat detection. Working knowledge of ISA/IEC 62443 and NIST SP 800-82

• Networking Strong, practitioner-level networking skills: TCP/IP, routing and switching, VLANs, subnetting, NAT, firewall policy, VPNs, and packet-level troubleshooting. Comfortable reading and challenging network architecture diagrams and working directly in network gear

• Industrial protocols Working knowledge of common industrial protocols (Modbus, DNP3, EtherNet/IP, PROFINET, OPC UA, and similar) and how they behave across segmented networks

• Proven track record as the lead…