Principal Architect, Manufacturing Security - USA Remote

Bring more to life.At Danaher, our work saves lives. And each of us plays a part. Fueled by our culture of continuous improvement, we turn ideas into impact – innovating at the speed of life. Our 60,000+ associates work across the globe at more than 15 unique businesses within life sciences, diagnostics, and biotechnology. Are you ready to accelerate your potential and make a real difference? At Danaher, you can build an incredible career at a leading science and technology company, where we’re committed to hiring and developing from within. You’ll thrive in a culture of belonging where you and your unique viewpoint matter. Learn about the Danaher Business System which makes everything possible.The Principal Architect, Manufacturing Security is responsible for leading the design and delivery of OT network security improvements across a defined platform portfolio of Danaher operating companies. This role translates enterprise OT architecture standards into site-specific implementation plans — driving network segmentation, firewall deployment, and DMZ build projects through to production cutover while serving as the senior technical resource for OT security delivery at the platform level. This position sits at the intersection of architecture, engineering, and operational execution in one of the most complex industrial cybersecurity programs in the global life sciences sector.This position is part of the Corporate Information Security and will be fully Remote. In this role, you will have the opportunity to:Serve as the senior OT security technical resource and primary DIS engineering point of contact for assigned platform operating companies — building trusted relationships with OpCo CIOs, IT leads, and plant engineers to translate DIS architecture standards into locally executable implementation plansTranslate enterprise OT architecture blueprints from the Principal Architect into network-executable engineering designs including firewall policy, VLAN topology, DMZ architecture, access control rules, and compensating controls for EoL/legacy assets — ensuring designs are safe to implement in active manufacturing environmentsPartner with OpCo OT Site Engineers and network teams during change window execution — serving as the DIS technical lead on-site or on-call during cutover to ensure segmentation changes are implemented without disrupting production operations, batch processes, or automated manufacturing systemsContribute to the deployment of OT remote access controls at platform sites alongside the Remote Access Lead — replacing legacy VPN, direct-vendor connections, and consumer-grade remote tools with approved, monitored, and controlled access methodsBuild the engineering knowledge base for the OT Security — documenting site-specific architecture decisions, implementation playbooks, deviation rationales, and as-built network diagrams for use by the broader DIS manufacturing security teamThe essential requirements of the job include: Strong hands-on experience designing and implementing OT network segmentation in live industrial environments — including VLAN architecture, industrial firewall configuration (Fortinet, Palo Alto, Cisco, or equivalent), DMZ build, and zone-based access controls across multi-site manufacturing operationsDemonstrated ability to lead OT network change projects in production-sensitive environments — including scheduling around production cycles, coordinating with plant operations and safety teams, and implementing compensating controls during transition periods without causing unplanned downtimeDeep familiarity with OT/ICS components and their network dependencies — including PLCs, DCS, SCADA, HMI, historian, and BMS systems — and the OT protocols they rely on (Modbus, Profinet, EtherNet/IP, OPC-UA, BACnet) — sufficient to make correct firewall and segmentation decisions in the presence of vendor and OpCo constraintsWorking knowledge of IEC 62443, NIST SP 800-82, and ISA-99 standards as applied to network segmentation and zone access controls — with hands-on experience applying these frameworks to remediate audit findings at manufacturing sites10+ years of experience in OT/ICS security engineering or industrial network engineering, with significant experience leading segmentation, firewall deployment, or OT infrastructure projects at multiple manufacturing sites simultaneouslyIt would be a plus if you also possess previous experience in:Experience managing concurrent segmentation or infrastructure projects across multiple operating companies or plant locations with different OT environments, production constraints, and IT governance models.Familiarity with OT asset discovery and network visibility platforms (Claroty, Nozomi Networks, Dragos, or Armis) and experience using them to validate zone membership and access control coverage during and after segmentation implementation.Travel, Motor Vehicle Record & Physical/Environment Requirements:Ability to travel 25%Danaher offers a broad array of comprehensive, competitive benefit programs that add value to our lives. Whether it’s a health care program or paid time off, our programs contribute to life beyond the job. Check out our benefits at Danaher Benefits Info.At Danaher, we believe in designing a better, more sustainable workforce. We recognize the benefits of flexible, remote working arrangements for eligible roles and are committed to providing enriching careers, no matter the work arrangement. This position is eligible for a remote work arrangement in which you can work remotely from your home. Additional information about this remote work arrangement will be provided by your interview team. Explore the flexibility and challenge that working for Danaher can provide.The annual salary range for this role is $150,000 - $180,000. This is the range that we in good faith believe is the range of possible compensation for this role at the time of this posting. This range may be modified in the future.This job is also eligible for bonus/incentive pay.#LI-RemoteWe offer comprehensive package of benefits including paid time off, medical/dental/vision insurance and 401(k) to eligible employees.Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.Join our winning team today. Together, we’ll accelerate the real-life impact of tomorrow’s science and technology. We partner with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life. For more information, visit . Danaher Corporation and all Danaher Companies are committed to equal opportunity regardless of race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender identity, or other characteristics protected by law. The U.S. EEO posters are available here.For candidates who are based outside of New York City or who are applying for roles outside of New York City, for more information about conditions of any job offer please click hereWe comply with federal and state disability laws and make reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact:View phone number on click.appcast.io or View email address on click.appcast.io SummaryJob number: R1315707Date posted : 2026-09-30Profession: Information TechnologyEmployment type: Full time