JD OT / PAM Engineer

As OT / PAM Engineer, you will be responsible for hands-on configuration, validation, and

testing of Tenable.OT and BeyondTrust as part of the engagement. You will be responsible for

ensuring the technical integrity of the implementation, aligning with the team's mission to

secure critical infrastructure.

WHAT YOU WILL DO | JOB RESPONSIBILITIES

In this role, you will:

Manage the configuration and deployment of Tenable.OT using existing standard configurations.
Monitor and validate OT asset discovery, classification, and visibility.
Develop and configure BeyondTrust privileged access workflows and policies.
Understand and implement least-privilege access and session monitoring.
Identify and resolve issues during pilot testing and stabilization.
Work closely with the team to assist with documentation and handover artifacts.
Collaborate with stakeholders to support the development of deployment steps for the APAC rollout playbook.

WHAT YOU WILL BRING | REQUIRED QUALIFICATIONS | YOUR PROFILE

The top candidate will have the following skills:

4–7 years experience in infrastructure security or PAM implementations.
Experience with Beyond Trust (PAM, session management) and exposure to OT / ICS environments.
A passion to work with security and infrastructure teams in regulated environments.
Ability to demonstrate a strong understanding of authentication, authorization, and access controls.
Fluent in English (written and spoken) - bilingual or near-native level.
Strong interpersonal and communication skills - this is a client-facing role that involves frequent interaction via email, calls, and meetings. Bonus qualifications | Ideally you have...
Prior experience with Tenable products (Tenable.OT, Tenable.sc, etc.).
Ability to navigate data center, manufacturing, or critical infrastructure. environments.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the Tech Aalto Privacy Policy, a copy of which is published at Tech Aalto’s website (https://www.techaalto.com/privacy/)

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

OT Security & Privileged Access Engineer