Endpoint Security Engineer - OT (f/m/x)

Welcome to ZEISS - a company that combines innovation and responsibility! Our corporate functions are diverse and make a decisive contribution to the strategic orientation and sustainable success of ZEISS

Your role

• Deploy, configure and operate TXOne Stellar, Malware Check Stations (MCS) and related OT endpoint security components across global manufacturing sites

• Maintain and continuously improve hardened security baselines for OT endpoints, including legacy OS, resource constrained devices, and production critical clients

• Integrate OT endpoint telemetry, health checks and alerts into central monitoring, dashboards and ITSM systems; automate routine tasks (packaging, updates, remediation)

• Investigate, troubleshoot and resolve OT endpoint security incidents; perform root-cause analysis and define preventive measures

• Ensure policy consistency, allow/deny list management, signature tuning and stable operation in production environments

• Collaborate with internal OT/IT stakeholders, production teams, and external integration partners to support rollout, upgrades and lifecycle management

• Maintain service documentation (runbooks, architecture diagrams, SOPs) and support compliance, audit readiness and continuous improvement initiatives

• Contribute to the overall OT security roadmap and alignment with Defender/XDR initiatives

Your profile

• Hands-on experience with TXOne Stellar, Portable Inspectors, Malware Check Stations, and similar OT focused endpoint security solutions

• Strong understanding of OT environments, including legacy operating systems, network segmentation, production constraints, and safety considerations

• Good knowledge of endpoint security fundamentals: AV/EDR, application control/whitelisting, removable media governance, policy and signature tuning

• Scripting/automation experience (PowerShell, Python or similar) for telemetry, packaging, and operational efficiency

• Familiarity with Microsoft Defender ecosystem (MDE, XDR) and ITSM processes (Incident, Problem, Change)

• Strong troubleshooting skills and the ability to work effectively with production teams and external providers

• Excellent communication skills in English, with the ability to collaborate across global teams

• Working experience in multinational manufacturing or regulated OT environments

Security-related background checks may be conducted as part of the hiring process. At an advanced stage of the application process, a police clearance certificate must be submitted.

Your ZEISS Recruiting Team: