OT Cybersecurity Architect

We are seeking an OT Cybersecurity Architect to shape and govern the security strategy for industrial control environments. This role will design practical, resilient cybersecurity solutions that protect critical operations while preserving safety, reliability, and uptime.

You will partner with engineering, operations, infrastructure, network, cloud, security, and external technology teams to strengthen security across SCADA, IC

• Define and maintain OT cybersecurity architecture, standards, reference designs, and long-term roadmaps.
• Design secure solutions for SCADA, DCS, PLCs, RTUs, HMIs, historian platforms, engineering workstations, SIS, IIoT, and edge technologies.
• Establish secure IT/OT integration patterns, including network segmentation, industrial DMZs, firewalls, remote access, jump hosts, wireless networks, and vendor connectivity.
• Apply Zero Trust principles, identity controls, MFA, least-privilege access, and privileged-access standards within OT environments.
• Guide the use of OT security tools such as asset discovery, passive monitoring, IDS/NDR, vulnerability management, SIEM integration, and secure remote-access platforms.
• Lead architecture reviews for modernization initiatives, assess risk, and recommend compensating controls where operational constraints exist.
• Support incident response, forensic investigations, and post-incident improvement efforts involving industrial systems.
• Evaluate emerging technologies, lead proof-of-concept initiatives, and present recommendations to technical and executive stakeholders.
• Ensure alignment with relevant frameworks and requirements, including NIST CSF, ISA/IEC 62443, SOX, and CIS Controls.

• Bachelor’s degree in cybersecurity, computer science, engineering, information systems, or a related field; equivalent experience will also be considered.
• 8+ years of experience in OT, IC, industrial cybersecurity, or critical-infrastructure environments.
• 3+ years of experience designing cybersecurity architecture for enterprise or industrial environments.
• Strong knowledge of SCADA, PLCs, HMIs, RTUs, industrial protocols, and secure industrial networking.
• Experience securing environments such as pipelines, terminals, refineries, manufacturing sites, utilities, or other critical infrastructure.
• Demonstrated experience with IT/OT segmentation, high-availability operational environments, and collaboration with engineering and industrial system vendors.
• Ability to balance cybersecurity objectives with operational safety, reliability, and continuity requirements.

• ISA/IEC 62443, CISSP, CISM, Microsoft Cybersecurity Architect Expert, CCNP Security, or Fortinet certifications.