Associate Systems Engineer – Lab Systems & OT Security

Role: Associate Systems Engineer - Lab Systems & OT Security
Experience: 4-6 Years

We are seeking an Associate Systems Engineer - Lab Systems & OT Security to support the security modernization and day-to-day administration of laboratory and Operational Technology (OT) environments across global sites.

The role is highly hands-on and focuses on Active Directory endpoint security vulnerability remediation access controls software governance USB controls and lab instrument environments. The engineer will work closely with IT Security Infrastructure Business System Owners lab scientists vendors and global site teams.

• Support Active Directory administration including OU management Group Policy user/service accounts and access controls.
• Execute Non-Attributable Account (NAA) remediation including account analysis password resets allow/deny lists and migration to managed service accounts.
• Support deployment and management of CrowdStrike EDR and other endpoint security controls across laboratory systems.
• Assist with OS patching vulnerability remediation EOL system identification and endpoint compliance.
• Implement software governance and application allowlisting across lab workstations and instrument PCs.
• Support USB/data transfer controls and manage exception processes for approved scientific and vendor workflows.
• Manage endpoint security configurations using Endpoint Management (EPM) tools.
• Support BeyondTrust or similar privileged access management and remote access solutions.
• Troubleshoot Windows workstations authentication issues connectivity problems and lab instrument access.
• Support isolated or semi-isolated lab/OT network environments and understand dependencies between instruments systems and shared accounts.
• Maintain inventories system configurations service account records allow/deny lists and security documentation.
• Manage technical requests and demand intake through ServiceNow or equivalent ITSM platforms.
• Work with global teams across US UK and other laboratory locations and provide hands-on support during major changes and hypercare.
• Collaborate with InfoSec Active Directory Infrastructure Service Desk vendors and Business System Owners to resolve security and operational issues.
• Use PowerShell and scripting where required to automate administration and security tasks.

• 4-6 years of experience in systems engineering endpoint security IT/OT support or laboratory systems administration.
• Strong hands-on experience with Microsoft Active Directory including OU GPO user/service accounts and authentication.
• Experience with Windows 10/11 and Windows Server administration.
• Experience with endpoint security/EDR tools preferably CrowdStrike Falcon.
• Understanding of vulnerability management patching EOL systems endpoint compliance and access controls.
• Experience with Endpoint Management (EPM) tools.
• Knowledge of privileged access management preferably BeyondTrust or equivalent.
• Understanding of IT/OT or laboratory environments network segmentation and instrument connectivity.
• Experience with ServiceNow or other ITSM platforms.
• Strong understanding of identity and access management concepts including NTLM Kerberos RC4 and service accounts.
• Strong troubleshooting analytical documentation and communication skills.

• Experience with SailPoint or other Identity Management platforms.
• Hands-on PowerShell scripting experience.
• Experience with Transparent Screen Lock (TSL) or similar technologies.
• Knowledge of USB restriction software allowlisting and endpoint control policies.
• Exposure to laboratory applications such as NuGenesis Waters Empower or similar scientific data systems.
• Knowledge of GxP and Information Security compliance in life sciences/pharmaceutical environments.
• Understanding of ITIL / IT Service Management principles.
• Experience working in biopharma pharmaceutical manufacturing or regulated environments.