Core & Main is a specialized distributor of water, wastewater, storm drainage and fire protection products, operating from over 370 locations across the United States and Canada. Founded in 2017, the company reports annual sales of approximately $7.4 billion and employs around 5,700 associates. Its product catalog covers pipe, valves, fittings, HDPE fusible piping, meters, geosynthetics, and treatment plant components - all critical infrastructure for municipal water systems and fire protection networks.
That operational footprint means the attack surface isn't theoretical: supply chain integrity, SCADA-adjacent systems in water treatment, and the security of logistics data across hundreds of branches all sit in scope. The threat model here extends beyond corporate endpoints to the physical infrastructure that communities depend on for safe drinking water and fire suppression. Protecting that means understanding OT/IT convergence risks, vendor access controls, and the data pipelines feeding distribution and metering systems.
Security roles at Core & Main would involve defending a large, geographically distributed organization where the assets aren't just data - they're the pipes, valves, and meters that keep water flowing. The scale and criticality of the infrastructure vertical demand disciplined identity management, network segmentation between corporate and operational environments, and incident response plans that account for real-world physical consequences. If you're looking to apply security engineering to systems where the stakes are tangible, this is that environment.
