<p><strong>Position Title: Lead OT Security Engineer</strong></p><p><strong>Reporting to</strong>: <strong>SR Manager OT Cyber Security</strong></p><p><br></p><p><br></p><p>Smurfit Westrock (NYSE:SW) is a global leader in sustainable paper and packaging solutions. We are materials scientists, packaging designers, mechanical engineers, and manufacturing experts with a shared purpose: Innovate Boldly. Package Sustainably. Guided by our values of integrity, respect, accountability and excellence, we use leading science and technology to move fiber-based packaging forward.</p><p><br></p><p>Our technology organization is transforming how we work at Smurfit Westrock. We align with our businesses to deliver innovative solutions that:</p><p><br></p><ul><li>Address specific business challenges, integrate processes, and create great experiences</li><li>Connect our work to shared goals that propel Smurfit Westrock forward in the Digital Age</li><li>Imagine how technology can advance the way we work by using disruptive technology</li></ul><p><br></p><p>We are looking for a forward-thinking OT security engineer that can accelerate our focus areas, such as building stronger foundational technology capabilities, reducing complexity, employing digital transformation concepts, and leveraging disruptive technology.</p><p><br></p><p><strong>The opportunity:</strong></p><p><br></p><p>The <strong>Lead Operational Technology Cybersecurity Engineer</strong> is a senior technical role responsible for helping secure the systems, networks, and technologies that support Smurfit Westrock’s manufacturing operations. This position plays a critical role in protecting plant environments while ensuring that cybersecurity controls support, rather than disrupting, safety, reliability, and production.</p><p>In this role, you will work closely with cybersecurity, engineering, maintenance, operations, and vendor teams to design and implement practical security solutions for manufacturing environments. You will help secure industrial networks, improve vendor remote access, support network segmentation efforts, troubleshoot technical issues, and guide sites through cybersecurity improvements.</p><p>A typical day may include reviewing a new vendor remote access request, troubleshooting a firewall or connectivity issue with a manufacturing site, helping design secure network segmentation for production systems, documenting a technical standard, supporting a risk remediation plan, or advising operations and engineering teams on how to implement cybersecurity controls without impacting plant uptime.</p><p>This role requires someone who can combine deep technical cybersecurity and networking expertise with a strong understanding of manufacturing environments. The successful candidate will serve as a trusted technical advisor and help advance Smurfit Westrock’s operational technology cybersecurity program across a broad and complex global footprint.</p><p><br></p><p><strong><u>How you will impact Smurfit Westrock:</u></strong></p><p><br></p><ul><li><strong>Design</strong> and implement cybersecurity architectures that protect manufacturing systems, industrial networks, and plant operations.</li><li><strong>Develop</strong> secure network segmentation, vendor remote access, monitoring, and control strategies that reduce cyber risk while supporting operational reliability.</li><li><strong>Troubleshoot</strong> and resolve technical issues involving vendor access, network communications, firewall policies, and cybersecurity controls in manufacturing environments.</li><li><strong>Support</strong> engineering, maintenance, operations, site technology teams, and vendors during cybersecurity implementations, remediations, and incident response activities.</li><li><strong>Lead</strong> cybersecurity improvement initiatives across manufacturing sites, including secure access, network modernization, monitoring, and risk reduction projects.</li><li><strong>Assess</strong> cybersecurity risks affecting manufacturing systems and help prioritize remediation based on business impact, safety, reliability, and exposure.</li><li><strong>Create</strong> technical documentation, network diagrams, standards, implementation guidance, and troubleshooting procedures for operational technology environments.</li><li><strong>Partner</strong> with cross-functional teams to embed cybersecurity into the lifecycle of manufacturing systems, from design and deployment through ongoing operations.</li><li><strong>Collaborate</strong> with security operations teams to improve monitoring, escalation, investigation, and response to cybersecurity events affecting manufacturing environments.</li><li><strong>Contribute</strong> to operational technology cybersecurity policies, standards, risk registers, audit readiness activities, and compliance efforts.</li><li><strong>Mentor</strong> other cybersecurity engineers and analysts by sharing technical expertise, practical guidance, and operational technology security best practices.</li><li><strong>Serve</strong> as a subject matter expert for operational technology cybersecurity across Smurfit Westrock.</li></ul><p><br></p><p><strong><u>What you need to succeed:</u></strong></p><p><br></p><p><strong>Required qualifications:</strong></p><ul><li><strong>Four or more years of cybersecurity experience</strong>, including hands-on experience supporting manufacturing, industrial, operational technology, or critical infrastructure environments.</li><li>Strong understanding of <strong>industrial control environments</strong>, including systems and networks used to support manufacturing operations.</li><li>Strong knowledge of <strong>networking fundamentals</strong>, including routing, switching, firewalls, network segmentation, and secure remote access.</li><li>Hands-on experience with <strong>cybersecurity technologies</strong>, such as firewalls, intrusion detection tools, endpoint security tools, security monitoring platforms, or log management systems.</li><li>Experience troubleshooting <strong>network connectivity, firewall rules, remote access, and security control issues</strong> in operational or production environments.</li><li>Ability to design and implement cybersecurity controls while considering <strong>safety, uptime, reliability, and operational impact</strong>.</li><li>Experience working with cross-functional teams, including cybersecurity, information technology, engineering, maintenance, operations, and third-party vendors.</li><li>Strong written communication skills, including the ability to create technical documentation, procedures, diagrams, and implementation guidance.</li><li>Strong verbal communication skills, with the ability to explain technical issues to both technical and non-technical audiences.</li><li>WFH with the ability to travel approximately <strong>30–40%</strong>, based on business and project needs.</li><li>Occasionally moves, lifts, or positions devices weighing up to 50 pounds</li><li>Ability to work reliably in non-climate-controlled industrial environments, including exposure to varying temperatures, dust, and high noise levels.</li><li>Must participate in an on-call rotation to support troubleshooting and incident response.</li></ul><p><br></p><p><strong>Preferred qualifications:</strong></p><ul><li>Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related field.</li><li>Professional cybersecurity certifications such as <strong>CISSP, GICSP, GRID</strong>, or equivalent certifications.</li><li>Experience with operational technology cybersecurity monitoring platforms such as <strong>Nozomi Networks, Dragos, Claroty</strong>, or similar technologies.</li><li>Experience securing <strong>vendors and third-party remote access</strong> into manufacturing or industrial environments.</li><li>Experience with industrial communication protocols such as <strong>Modbus, OPC, Ethernet/IP</strong>, or similar plant-floor technologies.</li><li>Familiarity with cybersecurity frameworks, standards, or regulations such as <strong>NIST Cybersecurity Framework, NIST guidance for industrial control systems, ISA/IEC 62443, or European cybersecurity requirements</strong>.</li><li>Experience supporting cybersecurity audits, assessments, risk registers, remediation plans, or compliance activities.</li><li>Experience leading technical projects across multiple manufacturing sites or regions.</li><li>Experience leading or participating in OT incident responses.</li></ul><p><br></p><p><strong>Skills and behaviors:</strong></p><ul><li>Demonstrates strong analytical and problem-solving skills, especially in complex technical environments.</li><li>Balances cybersecurity requirements with production needs, safety, reliability, and operational constraints.</li><li>Communicates clearly and professionally with technical teams, site leaders, vendors, and business stakeholders.</li><li>Take ownership of problems and drive them to resolution.</li><li>Works effectively across teams and builds trusted relationships with operations, engineering, cybersecurity, and technology partners.</li><li>Adapts quickly to changing priorities, urgent issues, and site-specific challenges.</li><li>Provides technical leadership without needing direct authority.</li><li>Documents work clearly and consistently to support repeatability, audit readiness, and knowledge sharing.</li><li>Maintains a continuous improvement mindset and looks for practical ways to reduce risk across the manufacturing environment.</li></ul><p><br></p><p><strong><u>What we offer:</u></strong></p><ul><li>Corporate culture based on loyalty, integrity, & respect.</li><li>Comprehensive training with numerous learning and development opportunities</li><li>An attractive salary reflecting skills, competencies, and potential.</li><li>A career with a global packaging company where Sustainability, Safety and Inclusion are business drivers and foundational elements of the daily work.</li></ul><p><br></p>