Cyber SDC - OT - Security Architect
Listed on 2026-08-03
-
IT/Tech
Cybersecurity, Systems Engineer
External Role Description
At EY, we’re all in to shape your future with confidence.
We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.
Role FamilyOperational Technology Cybersecurity Architecture
Primary FocusSite-level architecture guidance, standards adherence, design validation, and technical risk advisory
SenioritySenior OT security architecture advisor supporting secure and supportable industrial environments
PRACTICE DESCRIPTIONOrganizations operating industrial and operational technology environments require consistent application of cybersecurity standards, secure connectivity patterns, network segmentation practices, and operational support requirements across diverse site environments.
The Security Architect – OT role provides architecture guidance, design validation, and technical advisory support to help ensure OT environments are implemented and operated in alignment with established security requirements and approved design patterns.
JOB SUMMARYWe are seeking an experienced Security Architect – Operational Technology (OT) to provide architecture guidance and technical oversight for industrial, manufacturing, laboratory, and operational technology environments.
This role supports site-level design reviews, network segmentation validation, secure connectivity planning, exception analysis, operational readiness, and risk-based technical decision-making. The architect works across cybersecurity, infrastructure, engineering, operations, and site teams to help ensure OT solutions are secure, supportable, and aligned to established standards.
Role positioning:This role applies and interprets established architecture standards rather than defining enterprise standards or performing routine day-to-day governance queue execution.
KEY RESPONSIBILITIES Architecture Standards Adherence- Apply established OT cybersecurity standards and approved design patterns to site-level implementations.
- Review proposed OT network, firewall, secure access, monitoring, and infrastructure designs for alignment with approved standards.
- Identify gaps between proposed implementations and established architecture requirements.
- Recommend practical remediation options for design constraints, exceptions, or operational support concerns.
- Support architecture reviews for site implementations, modernization activities, and operational changes.
- Validate alignment with segmentation, zoning, firewall, remote access, monitoring, and operational support expectations.
- Participate in design discussions for complex, high-risk, or non-standard OT implementations.
- Partner with engineering and operations teams to support transition of approved designs into steady-state support.
- Support technical risk assessments and impact analysis for non-standard architecture decisions.
- Provide technical input for exception reviews, risk acceptance discussions, and remediation planning.
- Escalate material design risks, control gaps, or operational concerns through appropriate governance channels.
- Ensure architecture decisions and risk outcomes are documented and supportable.
- Review secure connectivity patterns involving firewalls, remote access, segmentation controls, monitoring platforms, and related infrastructure.
- Support alignment of applicable Zero Trust principles to OT users, devices, applications, and remote access use cases.
- Advise on technical dependencies that may affect implementation, operations, lifecycle management, or supportability.
- Validate that designs include monitoring, alerting, documentation, support records, and escalation considerations.
- Support operational readiness discussions and post-implementation improvement activities.
- Provide senior technical advisory support for complex OT security architecture decisions.
- Develop reusable guidance, lessons learned, and implementation patterns based on site delivery experience.
- Bachelor's degree in Cybersecurity,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).