Associate Systems Engineer - Lab Systems & OT Security

Role: Associate Systems Engineer - Lab Systems & OT Security
Experience: 4-6 Years

Job Summary

We are seeking an Associate Systems Engineer - Lab Systems & OT Security to support the security, modernization, and day-to-day administration of laboratory and Operational Technology (OT) environments across global sites.

The role is highly hands-on and focuses on Active Directory, endpoint security, vulnerability remediation, access controls, software governance, USB controls, and lab instrument environments . The engineer will work closely with IT Security, Infrastructure, Business System Owners, lab scientists, vendors, and global site teams.

Key Responsibilities

• Support Active Directory administration, including OU management, Group Policy, user/service accounts, and access controls.
• Execute Non-Attributable Account (NAA) remediation , including account analysis, password resets, allow/deny lists, and migration to managed service accounts.
• Support deployment and management of CrowdStrike EDR and other endpoint security controls across laboratory systems.
• Assist with OS patching, vulnerability remediation, EOL system identification, and endpoint compliance .
• Implement software governance and application allowlisting across lab workstations and instrument PCs.
• Support USB/data transfer controls and manage exception processes for approved scientific and vendor workflows.
• Manage endpoint security configurations using Endpoint Management (EPM) tools.
• Support BeyondTrust or similar privileged access management and remote access solutions.
• Troubleshoot Windows workstations, authentication issues, connectivity problems, and lab instrument access.
• Support isolated or semi-isolated lab/OT network environments and understand dependencies between instruments, systems, and shared accounts.
• Maintain inventories, system configurations, service account records, allow/deny lists, and security documentation.
• Manage technical requests and demand intake through ServiceNow or equivalent ITSM platforms .
• Work with global teams across US, UK, and other laboratory locations and provide hands-on support during major changes and hypercare.
• Collaborate with InfoSec, Active Directory, Infrastructure, Service Desk, vendors, and Business System Owners to resolve security and operational issues.
• Use PowerShell and scripting where required to automate administration and security tasks.

Required Skills

• 4-6 years of experience in systems engineering, endpoint security, IT/OT support, or laboratory systems administration.
• Strong hands-on experience with Microsoft Active Directory , including OU, GPO, user/service accounts, and authentication.
• Experience with Windows 10/11 and Windows Server administration .
• Experience with endpoint security/EDR tools , preferably CrowdStrike Falcon.
• Understanding of vulnerability management, patching, EOL systems, endpoint compliance, and access controls .
• Experience with Endpoint Management (EPM) tools.
• Knowledge of privileged access management , preferably BeyondTrust or equivalent.
• Understanding of IT/OT or laboratory environments , network segmentation, and instrument connectivity.
• Experience with ServiceNow or other ITSM platforms .
• Strong understanding of identity and access management concepts, including NTLM, Kerberos, RC4, and service accounts .
• Strong troubleshooting, analytical, documentation, and communication skills.

Preferred Skills

• Experience with SailPoint or other Identity Management platforms.
• Hands-on PowerShell scripting experience.
• Experience with Transparent Screen Lock (TSL) or similar technologies.
• Knowledge of USB restriction, software allowlisting, and endpoint control policies .
• Exposure to laboratory applications such as NuGenesis, Waters Empower , or similar scientific data systems.
• Knowledge of GxP and Information Security compliance in life sciences/pharmaceutical environments.
• Understanding of ITIL / IT Service Management principles.
• Experience working in biopharma, pharmaceutical, manufacturing, or regulated environments .