Safebox LLC provides strategic IT leadership, robust security, and operational excellence tailored specifically for mid-market enterprises. We are seeking an Operational Technology (OT) Firewall Engineer / Palo Alto Engineer (English Speaking - remote) to work with our manufacturing client. In this role you will Own the firewall and segmentation workstream of a North American Operational Technology cyber resilience initiative — remotely. Working from discovery data (Claroty or similar) and site survey output, you will baseline vigente traffic flows, identify IT/OT security vulnerabilities, remediate existing firewall posture, and design and implement network segmentation aligned to the Purdue model. This role turns discovery findings into enforceable policy — building rulebases that protect Operational Technology assets without breaking the industrial traffic that keeps plants running.
Key Responsibilities
- Review discovery data to baseline actual traffic flows, protocols,
and asset communications across plant networks; contribute to the IT/OT vulnerability assessment and segmentation recommendation
- Remediate existing firewall posture: rulebase cleanup, removal of overly permissive rules, policy optimization, documented exceptions
- Design and implement network segmentation: Purdue model zones and conduits, IT/OT boundary enforcement, industrial DMZ architecture for plant-to-enterprise data flows
- Build, stage, and deploy Palo Alto NGFW policies (security policy, NAT, App-ID/service-based rules, zone protection, logging standards) managed via Panorama
- Coordinate with the LAN engineer on VLAN/routing changes supporting segmentation; validate policy behavior remotely during cutover windows
- Tune policies for industrial protocols and long-lived Operational Technology sessions; troubleshoot blocked flows affecting PLCs, HMIs, historians, and vendor remote access
- Support implementation events remotely during scheduled maintenance windows (including nights, weeke