OT System Architect

Job Description

Position: OT System Architect

Primary

Location:

Home Based within Canada or US (with 50% travel required)

Reports To:
Senior Manager, Electrical Reliability

Compensation: $150,000 - $160,000 USD ($180,000 - $190,000 CDN) + bonus + benefits

Salary ranges are determined by role, level, and location. The range reflects the minimum and maximum target for new hire salaries for the position. Within the range, individual pay is determined by work location and additional factors, including job related skills, experience, and relevant education or training. More specific salary range for your preferred location can be discussed during the hiring process.

Please note that the compensation details listed reflect the base salary only, and do not include bonus, benefits, pension contributions or additional incentives.

Chemtrade is committed to delivering innovative solutions that address the complex challenges faced by our customers. As a responsible corporate citizen, we prioritize safety, sustainability, and environmental stewardship in all aspects of our operations. Our talented and diverse workforce is at the heart of our success, as we recognize that their knowledge, skills, and dedication drive our ability to deliver exceptional products and services.

At Chemtrade, we believe in creating an environment where everyone feels valued, respected, and empowered to contribute their unique perspectives and talents. By putting people at the center of our operations, we build strong connections, nurture innovation, and create a fulfilling work experience for all.

About This Role and About You

The OT Architect will play a key role in designing and supporting secure OT networks across Chemtrade’s manufacturing facilities. This role focuses on strengthening the reliability of OT network, OT/IT network segmentation, and cybersecurity controls in alignment with industry standards (ISA, NIST, NERC IP etc). The architect will work closely with the Lead to implement Chemtrade’s OT Cybersecurity Program, while supporting connectivity and security for PLC, DCS, BMS, and SIS systems across CHEMTRADE facilities.

Job Duties and Responsibilities:

• Design and deploy security solutions to protect OT systems against cyber threats, including firewalls, intrusion detection/prevention systems, and endpoint security software.
• Implement Chemtrade’s OT Cybersecurity Program, including network design, segmentation, and monitoring across plant environments.
• Design, configure, and maintain Cisco network devices (switches, routers, VLANs, wireless controllers) and Firewalls in OT networks.
• Manage and administer firewalls (Watch Guard, Fortinet, Palo Alto) to protect OT environments, OT DMZs, and remote access connections.
• Design, configure, and implement OT DMZ
• Manage OT AWS Network
• Implement Purdue Model–aligned network segmentation (ISA-95/ISA 62443, NIST SP 800-82) to separate IT, OT DMZ, and plant levels.
• Collaborate with IT, Corporate Electrical Reliability and Site teams to securely integrate IT, PLC (Programmable Logic Controllers), DCS (Distributed Control Systems), BMS (Burner Management System (BMS), SIS (Safety Instrumented Systems) with OT networks.
• Support and implement secure vendor and remote access solutions (VPN, jump hosts, MFA)
• Assist with asset inventory, vulnerability management, intrusion detection, and incident response in OT systems (e.g., Claroty, Palo Alto, SIEM).
• Monitor and optimize network performance, troubleshoot issues, and maintain high system availability.
• Maintain network diagrams, architecture documentation, and configuration standards for all OT environments.
• Contribute to OT risk assessments, audits, and disaster recovery planning.
• Provide technical support for OT networking issues across multiple Chemtrade sites.
• Establish and manage Process Control Network(PCN) network Domains and user access
• Work with IT infrastructure team to integrate, implement, and maintain security tools in OT environments across the plants.
• Work with third-party vendors and contractors to ensure that their systems and services are secure and compliant with company policies.
• Maintain up-to-date knowledge of industry best practices,…