DevSecOps Engineer (OT Security & Zero Trust)

About the role

Our client, a global manufacturing group, is rolling out OT network monitoring (Claroty CTD) and Zero Trust remote access (Zscaler) to its plants worldwide. We're looking for an engineer, ideally based in Kenya, to automate that rollout with Infrastructure as Code and CI/CD, so every plant is set up the same way, and then help run the platforms day to day.

What you'll do

• Automate the deployment and configuration of Claroty CTD sensors and Zscaler components with Terraform and/or Ansible and CI/CD pipelines
• Build integrations on both platforms' REST APIs and manage access policies as code, with version control, review and rollback
• Monitor, update and troubleshoot the platforms across plants in several countries
• Work with IT and OT teams on network segmentation and secure remote access for vendors and third parties
• Connect the platforms to SIEM, ticketing and monitoring tools
• Write runbooks and standards so new sites can be rolled out without you

What you bring

• Hands-on Claroty experience (CTD or xDome). This is what we value most: if you have it, we want to hear from you even without Zscaler experience
• Several years as a DevOps, DevSecOps, platform, network-automation or security engineer
• Terraform and/or Ansible in production
• CI/CD with GitLab CI, GitHub Actions, Azure DevOps or Jenkins
• Python, Bash or PowerShell, including work with REST APIs
• Solid network security: firewalls, VPN, segmentation, packet analysis (SPAN/TAP, Wireshark) and Zero Trust concepts
• Experience with Zscaler (ZPA/ZIA) or another Zero Trust access platform such as Prisma Access, Netskope, Cloudflare Access or Cisco Secure Access
• Fluent English (C1); German is a plus

No Claroty yet? Hands-on work with Nozomi, Dragos, Forescout or Microsoft Defender for IoT, or deep Zscaler experience, still makes you a candidate we want to talk to.

What's on offer

• 100% remote; based in Kenya preferred
• Hours aligned with Central European Time (±1 hour): about 10:00–18:00 EAT in the European summer and 11:00–19:00 EAT in winter
• Contract (freelance) or permanent employment through Remote.com, which handles local payroll, tax and benefits
• Production security work for a global manufacturer, with IT, OT and security teams in several countries

How to apply

Apply here on LinkedIn with your CV. Make sure it names the OT and Zero Trust platforms you've worked with hands-on and what you did with them yourself. Shortlisted applicants get a few short written questions about their experience before the first call.