Liebherr's Corporate Information Security function is building a dedicated Industrial Cyber Security (ICS) domain to protect OT environments across nine production divisions and a global logistics network.
We are seeking an
Industrial Cyber Security Architect (m/f/d)
to be the technical authority for OT security architecture across the Liebherr Group. You will own Liebherr's ICS Blueprint, shape the Global OT reference architecture and governance, define OT network design standards, review and approve site architecture before production commences, and drive the technical execution across the ICS service portfolio, rather than a generalist advisory role.
You will work within the Cyber Security Consulting domain alongside the Head of Industrial Cyber Security, the ICS service leads, and regional ICS Specialists, with close collaboration across Cybersecurity domains (Global SOC, Network Security, GRC, Cloud and IAM).
The working location for this position will be in Madrid city, where we operate a hybrid model, requiring at least 40% of the working time on‑site.
Creating passion: your responsibilities Architecture & Design Authority
Own and maintain the Liebherr ICS Blueprint: the binding technical standard for OT network architecture, segmentation, and hardening across all production sites.
Review and approve high‑level and low‑level OT network designs for all new sites.
Lead site assessments, risk prioritization, and structured remediation planning.
Evaluate OEM and vendor network architectures before integration.
Govern OT segmentation design in close collaboration with Network Security.
Secure Digital Factory Service
Act as the principal technical authority for the Secure Digital Factory service.
Define OT security specifications for new procurement.
Support transformational OT Security projects with architecture leadership for safe, scalable tooling deployment across multi‑site environments.
Standards, Governance & Cross‑Domain Collaboration
Ensure all OT security architectures align with IEC 62443, NIST CSF 2.0, NIS2, CRA, and applicable sector‑specific frameworks.
Provide technical guidance to Liebherr's regional ICS Specialists for site‑level engagement and implementation oversight.
Contributing your strengths: your qualifications
5+ years of experience in OT/ICS security or industrial network engineering, with hands‑on work in production or manufacturing environments.
Deep practical knowledge of OT protocols and environments: IEC 60870/61850, Modbus, DNP3, PROFINET, EtherNet/IP, OPC‑UA, BACnet.
Proven experience designing OT network architecture using the Purdue model: zone/conduit design, IT/OT segmentation, industrial DMZ patterns, and firewall placement.
Working knowledge of IEC 62443 and its application to real production environments: security levels, system requirements, component hardening.
Experience conducting OT security assessments.
Clear written and verbal communication; able to produce architecture documentation and present technical decisions to both engineers and senior stakeholders.
Willingness and ability to travel to Liebherr sites worldwide up to 25% of the time (majority of sites in Central Europe).
Our commitment to you: your benefits
Competitive compensation and benefits package that recognizes your expertise.
Flexible and hybrid working model.
Creative freedom and responsibility to shape processes and solutions in our integral transformation.
Continuous learning and development with tailored training and certification opportunities.
Meal vouchers.
Life and accident insurance.
Option to include a premium private health insurance package as part of the flexible remuneration.
A safe, stable and international workplace within a trusted family business that invests in people.
Location Liebherr IT Shared Service Centre Ibérica, S.L. Parque Norte. Alamo building Serrano Galvache, 56 28033 Madrid Spain (ES)
Contact Karoliina Rissanen
[email protected]
📌 Industrial Cyber Security Architect (m/f/d) (Madrid)
🏢 Liebherr
📍 Madrid