Endpoint Security Engineer - OT (f/m/x)

Welcome to ZEISS - a company that combines innovation and responsibility! Our corporate functions are diverse and make a decisive contribution to the strategic orientation and sustainable success of ZEISS

Your role

• Deploy, configure and operate TXOne Stellar, Malware Check Stations (MCS) and related OT endpoint security components across global manufacturing sites
• Maintain and continuously improve hardened security baselines for OT endpoints, including legacy OS, resource constrained devices, and production critical clients
• Integrate OT endpoint telemetry, health checks and alerts into central monitoring, dashboards and ITSM systems; automate routine tasks (packaging, updates, remediation)
• Investigate, troubleshoot and resolve OT endpoint security incidents; perform root-cause analysis and define preventive measures
• Ensure policy consistency, allow/deny list management, signature tuning and stable operation in production environments
• Collaborate with internal OT/IT stakeholders, production teams, and external integration partners to support rollout, upgrades and lifecycle management
• Maintain service documentation (runbooks, architecture diagrams, SOPs) and support compliance, audit readiness and continuous improvement initiatives
• Contribute to the overall OT security roadmap and alignment with Defender/XDR initiatives

Your profile

• Hands‑on experience with TXOne Stellar, Portable Inspectors, Malware Check Stations, and similar OT focused endpoint security solutions
• Strong understanding of OT environments, including legacy operating systems, network segmentation, production constraints, and safety considerations
• Good knowledge of endpoint security fundamentals: AV/EDR, application control/whitelisting, removable media governance, policy and signature tuning
• Scripting/automation experience (PowerShell, Python or similar) for telemetry, packaging, and operational efficiency
• Familiarity with Microsoft Defender ecosystem (MDE, XDR) and ITSM processes (Incident, Problem, Change)
• Strong troubleshooting skills and the ability to work effectively with production teams and external providers
• Excellent communication skills in English, with the ability to collaborate across global teams
• Working experience in multinational manufacturing or regulated OT environments

Your ZEISS Recruiting Team: Markus Repp