Industrial Cyber Security Architect

Our commitment to you: your benefits

At Liebherr, we believe people are at the heart of our success. As part of our international team, you'll enjoy a secure role in a family-owned company that values innovation, collaboration, and long-term career growth:

• Competitive compensation and benefits package that recognizes your expertise.
• Flexible and hybrid working model.
• Creative freedom and responsibility to shape processes and solutions in our global transformation.
• Continuous learning and development with tailored training and certification opportunities.
• Meal vouchers.
• Life and accident insurance.
• Option to include a premium private health insurance package as part of the flexible remuneration.
• A safe, stable and international workplace within a trusted family business that invests in people.

Contributing your strengths: your qualifications

• 5+ years of experience in OT/ICS security or industrial network engineering, with hands-on work in production or manufacturing environments.
• Deep practical knowledge of OT protocols and environments, such as IEC 60870/61850, Modbus, DNP3, PROFINET, EtherNet/IP, OPC-UA and BACnet.
• Proven experience designing OT network architecture using the Purdue model: zone/conduit design, IT/OT segmentation, industrial DMZ patterns, and firewall placement.
• Working knowledge of IEC 62443 and its application to real production environments: security levels, system requirements, component hardening.
• Experience conducting OT security assessments.
• Clear written and verbal communication; able to produce architecture documentation and present technical decisions to both engineers and senior stakeholders.
• Willingness and ability to travel to Liebherr sites worldwide up to 25% of the time (majority of sites in Central Europe).

Liebherr's Corporate Information Security function is building a dedicated Industrial Cyber Security (ICS) domain to protect OT environments across nine production divisions and a global logistics network.

We are seeking an Industrial Cyber Security Architect (m/f/d) to be the technical authority for OT security architecture across the Liebherr Group. This is not a generalist advisory role. You will own Liebherr's ICS Blueprint, shaping Liebherr's Global OT reference architecture and governance, define OT network design standards, review and approve site architecture before production commences, and drive the technical execution across the ICS service portfolio.

You will work within the Cyber Security Consulting domain alongside the Head of Industrial Cyber Security, the ICS service leads, and regional ICS Specialists, with close collaboration across Cybersecurity domains (Global SOC, Network Security, GRC, Cloud and IAM).

Creating passion: your responsibilities

Architecture & Design Authority:

• Own and maintain the Liebherr ICS Blueprint: the binding technical standard for OT network architecture, segmentation, and hardening across all production sites.
• Review and approve high-level and low-level OT network designs for all new sites
• Lead site assessments, risk prioritization, and structured remediation planning.
• Evaluate OEM and vendor network architectures before integration
• Govern OT segmentation design in close collaboration with Network Security.

Secure Digital Factory Service:

• Act as the principal technical authority for the Secure Digital Factory service
• Define OT security specifications for new procurement
• Support transformational OT Security projects with architecture leadership for safe, scalable tooling deployment across multi-site environments.

Standards, Governance & Cross-Domain Collaboration:

• Ensure all OT security architectures align with IEC 62443, NIST CSF 2.0, NIS2, CRA, and applicable sector-specific frameworks
• Provide technical guidance to Liebherr's regional ICS Specialists for site-level engagement and implementation oversight.

The working location for this position will be in Madrid city, where we operate a hybrid model, requiring at least 40% of the working time on-site on a weekly basis.

Liebherr IT Shared Service Centre Ibérica, S.L.

Parque Norte. Alamo building Serrano Galvache, 56

28033 Madrid

Spain (ES)

Marija Kostadinovic

marija.kostadinovic@liebherr.com