OT System Architect

Job Description

Position: OT System Architect

Primary

Location:

Home Based within Canada or US (with 50% travel required)

Reports To:
Senior Manager, Electrical Reliability

Compensation: $150,000 - $160,000 USD ($180,000 - $190,000 CDN) + bonus + benefits

Salary ranges are determined by role, level, and location. The range reflects the minimum and maximum target for new hire salaries for the position. Within the range, individual pay is determined by work location and additional factors, including job related skills, experience, and relevant education or training. More specific salary range for your preferred location can be discussed during the hiring process.

Please note that the compensation details listed reflect the base salary only, and do not include bonus, benefits, pension contributions or additional incentives.

The OT Architect will play a key role in designing and supporting secure OT networks across Chemtrade’s manufacturing facilities. This role focuses on strengthening the reliability of OT network, OT/IT network segmentation, and cybersecurity controls in alignment with industry standards (ISA, NIST, NERC IP etc). The architect will work closely with the Lead to implement Chemtrade’s OT Cybersecurity Program, while supporting connectivity and security for PLC, DCS, BMS, and SIS systems across CHEMTRADE facilities.

• Design and deploy security solutions to protect OT systems against cyber threats, including firewalls, intrusion detection/prevention systems, and endpoint security software.
• Implement Chemtrade’s OT Cybersecurity Program, including network design, segmentation, and monitoring across plant environments.
• Design, configure, and maintain Cisco network devices (switches, routers, VLANs, wireless controllers) and Firewalls in OT networks.
• Manage and administer firewalls (Watch Guard, Fortinet, Palo Alto) to protect OT environments, OT DMZs, and remote access connections.
• Design, configure, and implement OT DMZ.
• Manage OT AWS Network.
• Implement Purdue Model–aligned network segmentation (ISA-95/ISA 62443, NIST SP 800-82) to separate IT, OT DMZ, and plant levels.
• Collaborate with IT, Corporate Electrical Reliability and Site teams to securely integrate IT, PLC, DCS, BMS, and SIS with OT networks.
• Support and implement secure vendor and remote access solutions (VPN, jump hosts, MFA).
• Assist with asset inventory, vulnerability management, intrusion detection, and incident response in OT systems (e.g., Claroty, Palo Alto, SIEM).
• Monitor and optimize network performance, troubleshoot issues, and maintain high system availability.
• Maintain network diagrams, architecture documentation, and configuration standards for all OT environments.
• Contribute to OT risk assessments, audits, and disaster recovery planning.
• Provide technical support for OT networking issues across multiple Chemtrade sites.
• Establish and manage Process Control Network (PCN) network domains and user access.
• Work with IT infrastructure team to integrate, implement, and maintain security tools in OT environments across the plants.
• Work with third‑party vendors and contractors to ensure that their systems and services are secure and compliant with company policies.
• Maintain up‑to‑date knowledge of industry best practices, new security threats, and emerging technologies to ensure OT security measures are effective and current.
• Collaborate with IT and engineering teams to ensure that OT systems are integrated with the overall IT infrastructure in a secure and compliant manner.
• Analyze, troubleshoot, and investigate security related incidents, events, and alerts using proper tools or even manual techniques.
• Provide support for audit and remediation activities as required.
• Manage the process of gathering, analyzing and assessing the current and future threat landscape, as well as providing a realistic overview of risks and threats in the operational environment.
• Assist in the development of training, procedures, and documentation for internal and external audiences.
• Strong knowledge supporting and troubleshooting network assets.

• Bachelor’s degree…