Senior OT Security Engineer

This role is a Hybrid model with 3-4 days on-site per week expected between the Upper Merion and Upper Providence GSK Sites.

Global Supply Chain (GSC) Research and Development (R&D) Engineering Services provides Operations and Facilities Management and Capital Projects delivery for Technical R&D sites within GSC's Engineering and EHS organization.

This role will provide ongoing engineering support to R&D Engineering Services Operations, responsible for Facilities Services and Capital Projects program management. This will include the development and improvement of processes that support the operational delivery model and interfaces with other GSK functions, service partners and other 3rd party providers.

The purpose of this role is to hold the status of OT Cyber Security Champion, providing technical expertise to support a diversity of facilities equipment, automation and control systems across the PA cluster (2 R&D sites - Upper Providence and Upper Merion in Pennsylvania). The role will work closely with the site operations team, automation team, capital projects and service partner organizations and it is expected to provide hands-on engineering support wherever is required. The role will manage consistent execution and compliance within Automation and OT engineering programs across the sites through provision of engineering and project management skills. You will work to ensure they are aligned to the local needs and priorities of the business, and to ensure that cost, quality and compliance metrics are achieved by key contract partners.

The position will be responsible for regional compliance to external licensing and statutory requirements for engineering services provided by R&D Engineering Services.

This role will provide YOU the opportunity to lead key activities to progress YOUR career, these responsibilities include some of the following:

• Support and optimize the application of cybersecurity controls within the OT environment, to include (but are not limited to) user access management, system hardening/patching, anti-virus scanning and system configuration management

• Technical Authority - To act as the OT Network (OTN) Technical authority on related matters where required for the cluster. Provide maintenance and lifecycle support for site automation/digital applications; with a focus on systems administration, virtualization, cross-platform integrations, and digital compliance. Help deliver projects to transition and upgrade current OTN infrastructure at both sites to meet GSK IT and cyber security standards.

• Projects - Responsible for ensuring that all projects and engineering changes at the cluster comply with the GSK OT Security standards, guidance, processes and procedures.

• OT Security Risk Management - Owning and managing site OT Security risks including reducing and maintaining risks at an acceptable level. This involves working closely with the OT Security Manager to prioritize mitigation actions in alignment with the region's strategy and available budget.

• Technical support - Role is part of the site Operations team and is expected to provide hands-on support to the Operations team - Troubleshoot and diagnose problems within the OT network infrastructure, including virtualization hosts, server/system hardware, network switches, PLC/DCS controllers, and network devices. Role is also responsible for providing technical leadership during solution design, development, testing and implementation.

• Technical author/approver of local processes & procedures and ensure compliance with applicable GSK policies and procedures.

• To act as an advocate for OT Cybersecurity, enabling operations/projects to maximize the exploitation of technology while the OT Security is maintained. This involves working closely with the site Automation Manager to bring continuous improvements. Also support delivery of cyber security training to the site.

Why you?

Basic Qualifications:

We are looking for professionals with these required skills to achieve our goals:

• Bachelor's degree in computer science, engineering, or science related field

• 3 plus years' experience supporting Automation/ICS/OT systems and infrastructure.

• Experience with Automation/ICS/OT systems (BMS, PLC, SCADA, HMI, Field Instrumentation, etc.)

• Specialist training in OT Cyber Security (SANS ICS410/ICS515 and/or ISA/IEC 62443 or equivalent) and/or experience in Cyber Security risk reduction for IT/OT infrastructure.

• Experience with IT/OT networks principles and experience with networking concepts and hardware/technologies (TCP/IP, routers, switches, network-connected devices, etc.)

• Experience managing contractor/consulting staff.

Preferred Qualifications:

If you have the following characteristics, it would be a plus:

• Experience working within Automation or Operations at life science (pharmaceutical) Manufacturing and/or R&D sites in a regulated industry (exposed to GxP & EHS requirements).

• Strong Knowledge of IT/OT infrastructure and proven experience in delivering capital projects to achieve Cyber Security risk reduction.

• Experience with enterprise firewalls & networking, (Microsoft HyperV Server, Palo Alto & Cisco preferred)

• Experience with industrial networks (e.g. Profibus, Fieldbus, Ethernet, Modbus, Bacnet and Serial comms 485, RS232 etc.)

• Experience in systems/account administration, network design, and server troubleshooting is strongly preferred.

• Leadership skills to enhance the cybersecurity mindset of the workforce on site and be the main advocate of the OT Security standards.

Please visit GSK US Benefits Summary to learn more about the comprehensive benefits program GSK offers US employees.

Why GSK?

Uniting science, technology and talent to get ahead of disease together.

GSK is a global biopharma company with a special purpose - to unite science, technology and talent to get ahead of disease together - so we can positively impact the health of billions of people and deliver stronger, more sustainable shareholder returns - as an organisation where people can thrive. We prevent and treat disease with vaccines, specialty and general medicines. We focus on the science of the immune system and the use of new platform and data technologies, investing in four core therapeutic areas (infectious diseases, HIV, respiratory/ immunology and oncology).

Our success absolutely depends on our people. While getting ahead of disease together is about our ambition for patients and shareholders, it's also about making GSK a place where people can thrive. We want GSK to be a place where people feel inspired, encouraged and challenged to be the best they can be. A place where they can be themselves - feeling welcome, valued, and included. Where they can keep growing and look after their wellbeing. So, if you share our ambition, join us at this exciting moment in our journey to get Ahead Together.

If you require an accommodation or other assistance to apply for a job at GSK, please contact the GSK Service Centre at 1-877-694-7547 (US Toll Free) or +1 801 567 5155 (outside US).

GSK is an Equal Opportunity Employer and, in the US, we adhere to Affirmative Action principles. This ensures that all qualified applicants will receive equal consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, marital status, sexual orientation, gender identity/expression, age, disability, genetic information, military service, covered/protected veteran status or any other federal, state or local protected class.

Important notice to Employment businesses/ Agencies

GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site.

Please note that if you are a US Licensed Healthcare Professional or Healthcare Professional as defined by the laws of the state issuing your license, GSK may be required to capture and report expenses GSK incurs, on your behalf, in the event you are afforded an interview for employment. This capture of applicable transfers of value is necessary to ensure GSK's compliance to all federal and state US Transparency requirements. For more information, please visit GSK's Transparency Reporting For the Record site.