Senior Security Engineer - Operational Technology Network

Work Location Type: Hybrid
Req Number 322987
About Grainger:
W.W. Grainger, Inc., is a leading broad line distributor with operations primarily in North America, Japan and the United Kingdom. At Grainger, We Keep the World Working® by serving more than 4.5 million customers worldwide with products and solutions delivered through innovative technology and deep customer relationships. Known for its commitment to service and award-winning culture, the Company had 2024 revenue of $17.2 billion across its two business models. In the High-Touch Solutions segment, Grainger offers approximately 2 million maintenances, repair and operating (MRO) products and services, including technical support and inventory management. In the Endless Assortment segment, Zoro.com offers customers access to more than 14 million products, and MonotaRO.com offers more than 24 million products. For more information, visit www.grainger.com.
Compensation
The anticipated base pay compensation range for this position is $110,500.00 to $184,100.00.
Rewards and Benefits:
With benefits starting on day one, our programs provide choice and flexibility to meet team members' individual needs, including:

• Medical, dental, vision, and life insurance plans with coverage starting on day one of employment and 6 free sessions each year with a licensed therapist to support your emotional wellbeing.
• 18 paid time off (PTO) days annually for full-time employees (accrual prorated based on employment start date) and 6 company holidays per year.
• 6% company contribution to a 401(k) Retirement Savings Plan each pay period, no employee contribution required.
• Employee discounts, tuition reimbursement, student loan refinancing and free access to financial counseling, education, and tools.
• Maternity support programs, nursing benefits, and up to 14 weeks paid leave for birth parents and up to 4 weeks paid leave for non-birth parents.

For additional information and details regarding Grainger's benefits, please click on the link below:
https://experience100.ehr.com/grainger/Home/Tools-Resources/Key-Resources/New-Hire
The pay range provided above is not a guarantee of compensation. The range reflects the potential base pay for this role at the time of this posting based on the job grade for this position. Individual base pay compensation will depend, in part, on factors such as geographic work location and relevant experience and skills.
The anticipated compensation range described above is subject to change and the compensation ultimately paid may be higher or lower than the range described above.
Grainger reserves the right to amend, modify, or terminate its compensation and benefit programs in its sole discretion at any time, consistent with applicable law.
Position Details:
Grainger is seeking an Operational Technology Network Security Engineer with a strong background in network security skills and the Operational Technology (OT) / Industrial Control System (ICS) domain. This mid-level engineering role not only requires a broad understanding of network security concepts but also requires a strong technical understanding of OT/ICS security concepts and ability to implement security controls that meet the intended design. The successful candidate is familiar with general security engineering concepts, is comfortable in a cross-functional engineering environment, and is comfortable identifying security concerns and recommending appropriate mitigations.
"This position is not eligible for any form of sponsorship now or in the future. Individuals requiring sponsorship (e.g. OPT or H1B visa status) should not apply. Only individuals authorized to work in the United States now and for the foreseeable future will be considered for this position."
You will:
As an Operational Technology Network Security Engineer, you will protect Grainger OT assets by implementing advanced network security tools, automating, integrating Grainger network security tools and processes, and collaborating across the Information Security and IT organizations including making smart long-term decisions.
You will report to the Senior Manager of Information Security Engineering.
"This position is not eligible for any form of sponsorship now or in the future. Individuals requiring sponsorship (e.g. OPT or H1B visa status) should not apply. Only individuals authorized to work in the United States now and for the foreseeable future will be considered for this position."
Core Responsibilties:

• Requirement Analysis: Translate security requirements into firewall design.
• System Deployment: Lead the installation, configuration, and integration of network security technologies including SSE & Firewalls (Palo Alto and Zscaler preferred)
• Collaboration: Contribute to operational and policy decisions around Firewall and SSE technologies that improve Grainger's network security and OT security program
• Tailor Security Configurations: Adapt security settings to meet the unique operational needs of Grainger's OT systems while achieving defined security outcomes.
• Automation & Integration Runbooks: Develop automation scripts and author integration runbooks to ensure seamless and repeatable security tool implementations.
• System Troubleshooting: Quickly diagnose and resolve configuration or performance issues while ensuring minimal disruption to operations.
• Continuous Improvement: Leverage and deploy observability tools to ensure consistent and continual system performance that meets business demand.
• Security Audits: Conduct regular security audits to identify vulnerabilities and implement remedial actions.
• Incident Response: Develop and implement incident response plans to address security breaches and mitigate potential damage
• Collaboration with Architecture: Translate strategic security designs into practical, secure network implementations across the operational environment.

You have:

• Bachelor's/master's degree in a relevant field (e.g., Cybersecurity, Electrical Engineering, Computer Science, etc.); or an equivalent level of knowledge gained through on-the-job experience.
• 3+ years of experience designing and implementing Network Firewalls (Palo Alto preferred) and SSE technologies (Zscaler preferred) with a minimum of 2 years in OT Security
• 5+ years required of combined IT and Information Security work experience with a broad exposure to Infrastructure & Networks within multi-platform and cloud environments
• Experience automating Network Security solutions (eg: Python, Ansible)
• Experience with Agile Scrum methodology
• Relevant industry certifications such as CISSP, GICSP, CCNA/CCIE, PCNSE, or ISA/IEC 62443 Cybersecurity Expert
• Have strong technical understanding of the following:

• • Secure Remote Access methods specific to the OT domain. Experience may include Zscaler, Beyond Trust, CyberArk, Xage.
  • Network segmentation and supporting engineering models
  • OT network monitoring and intrusion detection systems. These may include Dragos, Nozomi, and Claroty.
  • Modern-day network designs which account for the hybrid and connected nature of new & emerging technologies (Industry 4.0, edge compute, and CPwE Cloud Connectivity).
  • A working understanding of major Cloud Service Providers
  • A working understanding of OT Incident Response procedures
• Experience translating architectural designs into functional and secure operational deployments
• Working understanding of the IEC/ISA 62443 framework

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex (including pregnancy), national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or expression, protected veteran status or any other protected characteristic under federal, state, or local law. We are proud to be an equal opportunity workplace.
We are committed to fostering an inclusive, accessible work environment that includes both providing reasonable accommodations to individuals with disabilities during the application and hiring process as well as throughout the course of one's employment, should you need a reasonable accommodation during the application and selection process, including, but not limited to use of our website, any part of the application, interview or hiring process, please advise us so that we can provide appropriate assistance.