Associate Systems Engineer – Lab Systems & OT Security

Role: Associate Systems Engineer - Lab Systems & OT Security
Experience: 4-6 Years

Job Summary

We are seeking an Associate Systems Engineer - Lab Systems & OT Security to support the security, modernization, and day-to-day administration of laboratory and Operational Technology (OT) environments across global sites.

The role is highly hands-on and focuses on Active Directory, endpoint security, vulnerability remediation, access controls, software governance, USB controls, and lab instrument environments. The engineer will work closely with IT Security, Infrastructure, Business System Owners, lab scientists, vendors, and global site teams.

Key Responsibilities

• Support Active Directory administration, including OU management, Group Policy, user/service accounts, and access controls.
• Execute Non-Attributable Account (NAA) remediation, including account analysis, password resets, allow/deny lists, and migration to managed service accounts.
• Support deployment and management of CrowdStrike EDR and other endpoint security controls across laboratory systems.
• Assist with OS patching, vulnerability remediation, EOL system identification, and endpoint compliance.
• Implement software governance and application allowlisting across lab workstations and instrument PCs.
• Support USB/data transfer controls and manage exception processes for approved scientific and vendor workflows.
• Manage endpoint security configurations using Endpoint Management (EPM) tools.
• Support BeyondTrust or similar privileged access management and remote access solutions.
• Troubleshoot Windows workstations, authentication issues, connectivity problems, and lab instrument access.
• Support isolated or semi-isolated lab/OT network environments and understand dependencies between instruments, systems, and shared accounts.
• Maintain inventories, system configurations, service account records, allow/deny lists, and security documentation.
• Manage technical requests and demand intake through ServiceNow or equivalent ITSM platforms.
• Work with global teams across US, UK, and other laboratory locations and provide hands-on support during major changes and hypercare.
• Collaborate with InfoSec, Active Directory, Infrastructure, Service Desk, vendors, and Business System Owners to resolve security and operational issues.
• Use PowerShell and scripting where required to automate administration and security tasks.

Required Skills

• 4-6 years of experience in systems engineering, endpoint security, IT/OT support, or laboratory systems administration.
• Strong hands-on experience with Microsoft Active Directory, including OU, GPO, user/service accounts, and authentication.
• Experience with Windows 10/11 and Windows Server administration.
• Experience with endpoint security/EDR tools, preferably CrowdStrike Falcon.
• Understanding of vulnerability management, patching, EOL systems, endpoint compliance, and access controls.
• Experience with Endpoint Management (EPM) tools.
• Knowledge of privileged access management, preferably BeyondTrust or equivalent.
• Understanding of IT/OT or laboratory environments, network segmentation, and instrument connectivity.
• Experience with ServiceNow or other ITSM platforms.
• Strong understanding of identity and access management concepts, including NTLM, Kerberos, RC4, and service accounts.
• Strong troubleshooting, analytical, documentation, and communication skills.

Preferred Skills

• Experience with SailPoint or other Identity Management platforms.
• Hands-on PowerShell scripting experience.
• Experience with Transparent Screen Lock (TSL) or similar technologies.
• Knowledge of USB restriction, software allowlisting, and endpoint control policies.
• Exposure to laboratory applications such as NuGenesis, Waters Empower, or similar scientific data systems.
• Knowledge of GxP and Information Security compliance in life sciences/pharmaceutical environments.
• Understanding of ITIL / IT Service Management principles.
• Experience working in biopharma, pharmaceutical, manufacturing, or regulated environments.