OT Cyber Solution Architect

Salary: £38,000 - 68,000 per year

• Proven track record as a Cyber Security Architect working natively within safety-critical industrial environments such as Utilities, Water, Energy, Oil and Gas, or Rail.
• Direct experience writing production‑grade High‑Level Designs (HLDs) and Low‑Level Designs (LLDs), and conducting successful Proofs of Concept (POCs) for security tooling.
• Deep architectural knowledge of at least two of the following:
  FortiNAC, Claroty, Sentinel One, or Microsoft Defender for Endpoint (MDE).
• Strong understanding of OT network security segmentation principles, including the Purdue Model.
• Familiarity with industrial standards such as IEC 62443 or the NCSC CAF.

• Take complete technical ownership of a major Zero Trust architecture rollout across a complex, safety‑critical OT environment.
• Own the full Zero Trust architecture and design lifecycle from initial requirements gathering and POCs through to rollout, deployment, and BAU transition.
• Lead dedicated OT teams and Subject Matter Experts, providing clear technical and design direction.
• Produce High‑Level Designs (HLDs) and Low‑Level Designs (LLDs) for a secure, scalable, and resilient OT security fabric.
• Create comprehensive testing plans and strategies.
• Complete change impact assessments to support safe, non‑disruptive deployment in safety‑critical industrial environments.
• Implement NAC across Layer 2 switches to support device authentication, posture checking, and dynamic access control and segmentation without disrupting operations.
• Deploy behavior‑based threat detection safely within constrained, legacy OT hardware environments.
• Establish perimeter threat detection, continuous visibility, and native SOC integration.

• Architect
• Fabric
• Forti Gate
• Hardware
• Support
• Network
• Security
• Exposed

We are seeking a reliable, approachable, responsive, and hands‑on OT Cyber Solution Architect to lead a major Zero Trust architecture rollout in a complex, safety‑critical Operational Technology environment. This is an initial 6‑month contract based in Reading, operating inside IR35, with an immediate start. The programme spans three core work streams:
Network Access Control using FortiNAC, Endpoint Detection and Response using Sentinel One and Microsoft Defender for Endpoint, and Network Detection and Response / OT visibility using Claroty, Forti Gate, Forti Guard, and FortiNAC. We offer the opportunity to provide technical leadership across a heavily federated estate and to shape solutions that are practical, deployable, and aligned to operational and plant‑floor constraints.

last updated 29 week of 2026