Tech Lead – OT Security & Network Access Control

Relout is a place created by ambitious people with a passion for technology. We work with international projects and clients from various industries, helping startups, software houses, and enterprises transform and scale their businesses. From infrastructure management to observability and automation – we build solid foundations that enable long-term growth and success. 💪

We hire talented engineers who love solving complex problems using software-driven, scalable approaches. You’ll become part of an engineering organization that values clean architecture, industry standards, and modern technologies.

Currently, we are looking for a Tech Lead – OT Security & Network Access Control to join a project for our strategic client — one of the largest manufacturing companies in Sweden, delivering IoT solutions and industrial asset management platforms at massive scale.

In this role, you will take ownership of the technical direction for a newly established OT Security & Network Access Control team. You will shape architectures securing thousands of distributed industrial sites, balancing modern security principles with real-world OT constraints. This is a hands-on technical leadership role with strong architectural ownership and real customer impact.

Despite being a well-established company, our client’s culture is far from a typical corporation. Teams are small and autonomous, engineers have real ownership and freedom of action, and a remote-first & async-first approach is encouraged. Scandinavian work culture strongly emphasizes work-life balance, which is reflected both in the project itself and across Relout.

🔷Responsibilities:

• Set and own the technical vision, architecture, and roadmap for OT security and network access control

• Provide day-to-day technical leadership for the team, mentoring engineers and raising overall technical maturity

• Design end-to-end architectures for securing OT networks across customer-deployed industrial sites

• Define and maintain reference architectures, security standards, and reusable design patterns

• Architect scalable solutions for:

  • Network segmentation and secure zone models (IT/OT separation, least privilege)

  • Secure technician and support access to OT equipment

  • Authentication, authorization, and identity lifecycle management

  • Device identity, PKI, certificate lifecycle, and trust establishment

  • Remote configuration, patching, and lifecycle management of OT devices

  • Monitoring, logging, and observability of OT environments

• Lead technical decisions around L2/L3 networking, VLANs, routing, firewalls, VPNs, NAC or Zero Trust approaches adapted to OT realities

• Apply and interpret security standards such as IEC 62443, NIST, and ISO 27001/27002

• Design solutions that scale to thousands of sites using AWS for centralized policy, identity, secrets, and edge-to-cloud connectivity

• Collaborate closely with Solution Architects, SRE, Edge Connectivity teams, and business stakeholders

• Review designs, configurations, and scripts to ensure security, correctness, and operability

• Create high-quality technical documentation and architecture diagrams (Confluence, draw.io)

🎯Requirements:

• Strong background in networking and security architecture, ideally in OT, industrial, IoT, or embedded environments

• Deep understanding of:

  • TCP/IP, routing, switching, VLANs, VPNs, firewalls

  • Identity, authentication, authorization, and access control models

  • Secure remote access for distributed and constrained environments

• Experience designing systems operating at fleet scale across many customer sites

• Solid experience with Linux-based systems in edge or constrained environments

• Practical experience applying security standards, preferably IEC 62443

• Strong systems thinking and threat-modeling mindset

• Experience with AWS services related to networking, security, and edge connectivity

• Ability to lead technical teams, make difficult architectural decisions, and clearly communicate trade-offs

• Working knowledge of scripting or programming (Bash, Python, Go) to review, guide, and prototype solutions

• Excellent written and verbal communication skills, both technical and non-technical

Nice to have:

• Experience with NAC, Zero Trust, or industrial remote access solutions

• PKI, certificate automation, and device identity at scale

• Yocto or embedded Linux distribution experience

• Background in manufacturing, industrial automation, or OT environments

  
  

⭐What we offer:

• Flexible contract currency of your choice (PLN/EUR/SEK)

• Flexible work arrangements and remote work options

• Professional development and training opportunities

• Collaborative and inclusive work environment

• Opportunity to work on cutting-edge technologies and make a meaningful impact in the dairy industry

• Regular company events and integrations (meetups)

• Unlimited legal advice & support with B2B partnership and self-employment

• Missing anything you like? Luxmed, Multisport? Ask us about it!

Apply now! Join Relout Team today!📢