Industrial Cyber Security Architect (m/f/d)Madrid

Liebherr's Corporate Information Security function is building a dedicated Industrial Cyber Security (ICS) domain to protect OT environments across nine production divisions and a global logistics network.

We are seeking an Industrial Cyber Security Architect (m/f/d) to be the technical authority for OT security architecture across the Liebherr Group. This is not a generalist advisory role. You will own Liebherr’s ICS Blueprint, shaping Liebherr’s Global OT reference architecture and governance, define OT network design standards, review and approve site architecture before production commences, and drive the technical execution across the ICS service portfolio.

You will work within the Cyber Security Consulting domain alongside the Head of Industrial Cyber Security, the ICS service leads, and regional ICS Specialists, with close collaboration across Cybersecurity domains (Global SOC, Network Security, GRC, Cloud and IAM).

The working location for this position will be in Madrid city, where we operate a hybrid model, requiring at least 40% of the working time on-site.

Creating passion: your responsibilities

Architecture & Design Authority:

• Own and maintain the Liebherr ICS Blueprint: the binding technical standard for OT network architecture, segmentation, and hardening across all production sites.
• Review and approve high-level and low-level OT network designs for all new sites
• Lead site assessments, risk prioritization, and structured remediation planning.
• Evaluate OEM and vendor network architectures before integration
• Govern OT segmentation design in close collaboration with Network Security.

Secure Digital Factory Service:

• Act as the principal technical authority for the Secure Digital Factory service
• Define OT security specifications for new procurement
• Support transformational OT Security projects with architecture leadership for safe, scalable tooling deployment across multi-site environments.

Standards, Governance & Cross-Domain Collaboration:

• Ensure all OT security architectures align with IEC 62443, NIST CSF 2.0, NIS2, CRA, and applicable sector-specific frameworks
• Provide technical guidance to Liebherr’s regional ICS Specialists for site-level engagement and implementation oversight.

Contributing your strengths: your qualifications

• 5+ years of experience in OT/ICS security or industrial network engineering, with hands-on work in production or manufacturing environments.
• Deep practical knowledge of OT protocols and environments: IEC 60870/61850, Modbus, DNP3, PROFINET, EtherNet/IP, OPC-UA, BACnet.
• Proven experience designing OT network architecture using the Purdue model: zone/conduit design, IT/OT segmentation, industrial DMZ patterns, and firewall placement.
• Working knowledge of IEC 62443 and its application to real production environments: security levels, system requirements, component hardening.
• Experience conducting OT security assessments.
• Clear written and verbal communication; able to produce architecture documentation and present technical decisions to both engineers and senior stakeholders.
• Willingness and ability to travel to Liebherr sites worldwide up to 25% of the time (majority of sites in Central Europe).

Our commitment to you: your benefits

At Liebherr, we believe people are at the heart of our success. As part of our international team, you’ll enjoy a secure role in a family-owned company that values innovation, collaboration, and long-term career growth:

• Competitive compensation and benefits package that recognizes your expertise.
• Flexible and hybrid working model.
• Creative freedom and responsibility to shape processes and solutions in our global transformation.
• Continuous learning and development with tailored training and certification opportunities.
• Meal vouchers.
• Life and accident insurance.
• Option to include a premium private health insurance package as part of the flexible remuneration.
• A safe, stable and international workplace within a trusted family business that invests in people.

Please note that we can only accept applications submitted through our website, using the online application form.

Please note that we do not accept applications via recruitment agencies for this position.

Have we awoken your interest? Then we look forward to receiving your online application. If you have any questions, please contact Karoliina Rissanen.

One Passion. Many Opportunities.