ZZP: SOC Infrastructure Engineer (DevOps) – OT Security

Contract:

2 years |

Location:

Fully Remote |

Team:

International OT Security Team

This OT Security Services team is expanding and looking for a

hands-on SOC Infrastructure Engineer (DevOps)

to help strengthen and modernize the on‐prem OT SOC landscape. You will work with

Elasticsearch, Graylog, Dragos, Tenable , and containerized detection tooling to improve monitoring, visibility, and automation across critical OT environments. You'll collaborate with security engineers, OT platform teams, and network specialists to deliver secure, automated, and scalable SOC infrastructure.

Your Responsibilities Support, improve, and maintain the

on‐prem OT SOC infrastructure . Engineer and operate SOC tooling:

Elasticsearch, Graylog, Dragos, Tenable.sc / Tenable.ot . Build

GitLab CI/CD pipelines

for deploying SOC components (IDS/IPS sensors, log forwarders, SIEM pipelines). Use

Ansible (IaC)

for consistent deployments across OT networks. Automate tasks with

Python, Bash, and PowerShell . Deploy, configure, and maintain

IDS sensors

and containerized detection services. Design and secure

Docker + Kubernetes

environments (network policies, secrets, image security, runtime controls). Work closely with OT governance, OT infra, and security teams. Maintain clear documentation for configurations and architecture.

Required Skills Strong experience with

Docker & Kubernetes GitLab CI/CD

expertise Scripting:

Python, Bash, PowerShell Strong knowledge of

Linux + Windows Solid understanding of

TCP/IP , networking fundamentals, PCAP analysis Experience with

Elasticsearch / ELK

and

Graylog

(dashboards, pipelines, alerts) Knowledge of

VMware

or virtualized environments Hands-on with

infrastructure automation (Ansible) Ability to work independently, take ownership, and deliver in on‐prem security environments Excellent English communication

Nice-to-Have Dutch or German language skills Experience in

industrial / OT environments

(manufacturing, energy, critical infrastructure) Knowledge of IDS/IPS tools or Dragos/Tenable