Tech Lead – OT Security & Network Access Control

Kraków, Slavic Europe, PLRemoteplvia direct

// Job Type

Full Time

// Salary

Not disclosed

// Posted

4 months ago

// Work Mode

remote

About the Role

<h4>🚀 Tech Lead – OT Security & Network Access Control</h4>Location: Poland - Hybrid Contract: B2B, Full-TimeJoin the Future of Digital Tech with KolomoloAt Kolomolo, we don’t just follow trends - we set them. As a global supplier of IT services and digital modernization solutions, we help businesses embrace cutting-edge technology to optimize their operations. Now, we are growing and looking for fresh talent to grow with us.Are you proactive, tech-savvy, and eager to build your career in IT? This role could be your perfect fit.<h4>About the Role</h4>We are looking for a Tech Lead – OT Security & Network Access Control to take ownership of a modern OT security architecture focused on strong identity, segmentation, and zero-trust principles.This role offers a rare opportunity to design and deploy a Network Access Control (NAC) ecosystem from the ground up, securing thousands to millions of connected devices across operational networks while ensuring uptime and performance. You will act as both a technical authority and a hands-on leader, guiding implementation and shaping long-term strategy.<h5>What You’ll Be Doing</h5>Technical Leadership & Architecture<ul><li>Own the design and rollout of a tiered trust OT security model based on NAC principles.</li><li>Define security zones and access policies for heterogeneous device environments (industrial systems, IoT, third-party equipment).</li><li>Translate high-level security requirements into practical, scalable network designs.</li></ul>NAC & Identity Implementation<ul><li>Lead deployment of PacketFence NAC from pilot phases through full production.</li><li>Implement certificate-based authentication using 802.1X (EAP-TLS) for trusted devices.</li><li>Design and manage PKI workflows, including certificate issuance, renewal, and revocation.</li><li>Enable automated device identification and classification for non-certificate-based endpoints.</li></ul>Network & Integration<ul><li>Design VLAN and segmentation strategies with dynamic assignment based on device posture.</li><li>Integrate NAC with existing network infrastructure using RADIUS.</li><li>Work closely with network, platform, and field teams to ensure smooth adoption.</li></ul>Governance & Documentation<ul><li>Produce and maintain architecture diagrams, configuration standards, and runbooks.</li><li>Support regulatory and compliance efforts, including alignment with EU cybersecurity requirements.</li><li>Contribute to security best practices and internal standards.</li></ul>People & Collaboration<ul><li>Act as a mentor and technical reference for engineers.</li><li>Collaborate across teams including cloud, firmware, operations, and customer delivery.</li><li>Provide clear guidance to both technical and non-technical stakeholders.</li></ul><h5>What We Are Looking For</h5>Must-Have<ul><li>5+ years of experience in network security, NAC, or identity and access technologies.</li><li>Strong hands-on knowledge of 802.1X, RADIUS, and certificate-based authentication.</li><li>Solid understanding of PKI concepts and certificate lifecycle management.</li><li>Experience designing network segmentation using VLANs and access policies.</li><li>Linux administration skills (Debian/Ubuntu-based systems).</li><li>Scripting and automation skills (Python, Bash).</li><li>Ability to clearly communicate complex technical concepts.</li></ul>Nice-to-Have<ul><li>Experience with PacketFence or similar NAC platforms (e.g. Cisco ISE, Aruba ClearPass, FortiNAC)</li><li>Exposure to OT / ICS security standards (IEC 62443, NIST, etc.).</li><li>Experience with MikroTik RouterOS or similar network platforms.</li><li>Knowledge of TPMs, hardware-backed identities, or HSMs.</li><li>Background in IoT, embedded systems, or industrial environments.</li><li>Familiarity with EU Cyber Resilience Act or related regulations.</li></ul><h5>Technology Environment</h5><ul><li>NAC: PacketFence (open-source).</li><li>Networking: MikroTik routers and switches.</li><li>Authentication: FreeRADIUS, 802.1X (EAP-TLS).</li><li>PKI: Step-CA and PacketFence integrated PKI.</li><li>Device Profiling: Fingerbank.</li><li>Monitoring & Logging: Integrated with central SIEM/log platforms.</li><li>Infrastructure: VMware / Proxmox, Debian-based Linux systems.</li></ul><h5>What is in It for You</h5><ul><li> Competitive salary and benefits.</li></ul><ul><li> Career development opportunities in a growing tech company.</li></ul><ul><li> Continuous learning culture: mentorship, internal training, and certifications.</li></ul><ul><li> Flexible, agile work environment (remote, hybrid, or on-site in Kraków.</li></ul><ul><li> Office perks: great coffee, tea, fresh fruit, snacks, and a fun atmosphere.</li></ul><ul><li> Flat management structure, where your voice matters.</li></ul><ul><li> Regular team events and a social, supportive work culture.</li></ul><ul><li> B2B contract or Contract of Mandate (Umowa Zlecenie).</li></ul><h5>🌟 Why Join Kolomolo?</h5>At Kolomolo, we prioritize innovation, agility, and autonomy. Our teams have the freedom to own their work, share ideas, and make meaningful contributions. Inspired by Scandinavian values, we believe in work-life harmony and creating an inclusive culture where everyone thrives.You will be part of a passionate, skilled, and friendly team that works hard and celebrates together. Here, you can build your career on your own terms, with opportunities to grow, learn, and make a real impact.<h5>Our Flat Structure & The Culture of Inclusion </h5>At Kolomolo, we break the corporate mold. We offer:<ul><li>Agile Teams & Autonomy: No micromanagement. You’ll own your projects and enjoy the freedom to innovate.</li><li>Work-Life Harmony: Inspired by Scandinavian values, we prioritize balance and flexibility, where remote work and asynchronous collaboration are in our DNA.</li><li>Learning & Growth: Continuous learning is at our core. We reward hard work, value smart ideas, and foster an environment of mutual respect and trust.</li><li>Inclusive Culture: We believe in DEI: diversity, equity and inclusion. We are committed to creating an environment where every individual, regardless of background, identity, or experience feels valued, respected, and empowered to thrive.</li></ul>Join Kolomolo and elevate your career with cutting-edge technology, a supportive team, and a company that truly values your input.Ready for the next step? Apply now at <a target="_blank" href="https://jobs.kolomolo.com/jobs/6928250-tech-lead-ot-security-network-access-control">https://jobs.kolomolo.com/jobs/6928250-tech-lead-ot-security-network-access-control</a> and start an exciting journey of growth and innovation with us!

View on Original Source

Interested in this job?

Use our AI to tailor your resume for this Tech Lead – OT Security & Network Access Control position at Kolomolo.