Endpoint Security Engineer - OT (f/m/x)

Carl Zeiss Jena GmbH

Apply to this job
Oberkochen Jena Until 9/13/2026 H-1B sponsor history First posted March 19, 2026 Last posted July 15, 2026
Job description

Welcome to ZEISS – a company that combines innovation and responsibility! Our corporate functions are diverse and make a decisive contribution to the strategic orientation and sustainable success of ZEISS

Your role

  • Deploy, configure and operate TXOne Stellar, Malware Check Stations (MCS) and related OT endpoint security components across global manufacturing sites

  • Maintain and continuously improve hardened security baselines for OT endpoints, including legacy OS, resource constrained devices, and production critical clients

  • Integrate OT endpoint telemetry, health checks and alerts into central monitoring, dashboards and ITSM systems; automate routine tasks (packaging, updates, remediation)

  • Investigate, troubleshoot and resolve OT endpoint security incidents; perform root-cause analysis and define preventive measures

  • Ensure policy consistency, allow/deny list management, signature tuning and stable operation in production environments

  • Collaborate with internal OT/IT stakeholders, production teams, and external integration partners to support rollout, upgrades and lifecycle management

  • Maintain service documentation (runbooks, architecture diagrams, SOPs) and support compliance, audit readiness and continuous improvement initiatives

  • Contribute to the overall OT security roadmap and alignment with Defender/XDR initiatives

Your profile

  • Hands-on experience with TXOne Stellar, Portable Inspectors, Malware Check Stations, and similar OT focused endpoint security solutions

  • Strong understanding of OT environments, including legacy operating systems, network segmentation, production constraints, and safety considerations

  • Good knowledge of endpoint security fundamentals: AV/EDR, application control/whitelisting, removable media governance, policy and signature tuning

  • Scripting/automation experience (PowerShell, Python or similar) for telemetry, packaging, and operational efficiency

  • Familiarity with Microsoft Defender ecosystem (MDE, XDR) and ITSM processes (Incident, Problem, Change)

  • Strong troubleshooting skills and the ability to work effectively with production teams and external providers

  • Excellent communication skills in English, with the ability to collaborate across global teams

  • Working experience in multinational manufacturing or regulated OT environments

Your ZEISS Recruiting Team:

Markus Repp
About this role

Summary

Manage OT endpoint security, troubleshoot incidents, and collaborate on security upgrades.

Job title

Endpoint Security Engineer - OT (f/m/x)

Experience level

null

Industry

healthcare

Location requirements

Oberkochen, Jena, München, Petaling Jaya; remote work not specified

Salary

Not specified

Visa sponsorship

H-1B sponsor history

Management role

No

Skills & keywords

Required skills

TXOne StellarMalware Check StationsOT environmentendpoint securityPowerShellPythonMicrosoft DefenderITSMtroubleshooting

Preferred skills

OT environmentslegacy OSnetwork segmentationpolicy tuningproduction constraints

Specializations

OT environmentendpoint securityautomationScriptingMDE and XDR
Locations

Structured locations inferred from the posting.

73447 Oberkochen, Germany

On-site City

07 Jena, Germany

On-site City

Munich, Germany

On-site City

Petaling Jaya, Selangor, Malaysia

On-site City