Endpoint Security Engineer - OT (f/m/x)
<div class="show-more-less-html__markup show-more-less-html__markup--clamp-after-5 relative overflow-hidden"> Welcome to ZEISS – a company that combines innovation and responsibility! Our corporate functions are diverse and make a decisive contribution to the strategic orientation and sustainable success of ZEISS<br/><br/><strong>Your role<br/><br/></strong><ul><li>Deploy, configure and operate TXOne Stellar, Malware Check Stations (MCS) and related OT endpoint security components across global manufacturing sites</li><li>Maintain and continuously improve hardened security baselines for OT endpoints, including legacy OS, resource constrained devices, and production critical clients</li><li>Integrate OT endpoint telemetry, health checks and alerts into central monitoring, dashboards and ITSM systems; automate routine tasks (packaging, updates, remediation)</li><li>Investigate, troubleshoot and resolve OT endpoint security incidents; perform root-cause analysis and define preventive measures</li><li>Ensure policy consistency, allow/deny list management, signature tuning and stable operation in production environments</li><li>Collaborate with internal OT/IT stakeholders, production teams, and external integration partners to support rollout, upgrades and lifecycle management</li><li>Maintain service documentation (runbooks, architecture diagrams, SOPs) and support compliance, audit readiness and continuous improvement initiatives</li><li>Contribute to the overall OT security roadmap and alignment with Defender/XDR initiatives<br/><br/></li></ul><strong>Your profile<br/><br/></strong><ul><li>Hands-on experience with TXOne Stellar, Portable Inspectors, Malware Check Stations, and similar OT focused endpoint security solutions</li><li>Strong understanding of OT environments, including legacy operating systems, network segmentation, production constraints, and safety considerations</li><li>Good knowledge of endpoint security fundamentals: AV/EDR, application control/whitelisting, removable media governance, policy and signature tuning</li><li>Scripting/automation experience (PowerShell, Python or similar) for telemetry, packaging, and operational efficiency</li><li>Familiarity with Microsoft Defender ecosystem (MDE, XDR) and ITSM processes (Incident, Problem, Change)</li><li>Strong troubleshooting skills and the ability to work effectively with production teams and external providers</li><li>Excellent communication skills in English, with the ability to collaborate across global teams</li><li>Working experience in multinational manufacturing or regulated OT environments<br/><br/></li></ul><strong>Your ZEISS Recruiting Team<br/><br/></strong>Markus Repp </div>