Endpoint Security Engineer - OT (f/m/x)

Job Description:

Welcome to ZEISS - a company that combines innovation and responsibility! Our corporate functions are diverse and make a decisive contribution to the strategic orientation and sustainable success of ZEISS

Your role
* Deploy, configure and operate TXOne Stellar, Malware Check Stations (MCS) and related OT endpoint security components across global manufacturing sites
* Maintain and continuously improve hardened security baselines for OT endpoints, including legacy OS, resource constrained devices, and production critical clients
* Integrate OT endpoint telemetry, health checks and alerts into central monitoring, dashboards and ITSM systems; automate routine tasks (packaging, updates, remediation)
* Investigate, troubleshoot and resolve OT endpoint security incidents; perform root-cause analysis and define preventive measures
* Ensure policy consistency, allow/deny list management, signature tuning and stable operation in production environments
* Collaborate with internal OT/IT stakeholders, production teams, and external integration partners to support rollout, upgrades and lifecycle management
* Maintain service documentation (runbooks, architecture diagrams, SOPs) and support compliance, audit readiness and continuous improvement initiatives
* Contribute to the overall OT security roadmap and alignment with Defender/XDR initiatives

Your profile
* Hands-on experience with TXOne Stellar, Portable Inspectors, Malware Check Stations, and similar OT focused endpoint security solutions
* Strong understanding of OT environments, including legacy operating systems, network segmentation, production constraints, and safety considerations
* Good knowledge of endpoint security fundamentals: AV/EDR, application control/whitelisting, removable media governance, policy and signature tuning
* Scripting/automation experience (PowerShell, Python or similar) for telemetry, packaging, and operational efficiency
* Familiarity with Microsoft Defender ecosystem (MDE, XDR) and ITSM processes (Incident, Problem, Change)
* Strong troubleshooting skills and the ability to work effectively with production teams and external providers
* Excellent communication skills in English, with the ability to collaborate across global teams
* Working experience in multinational manufacturing or regulated OT environments

Your ZEISS Recruiting Team:Markus Repp