Cyber SDC - OT - Security Architect

Location:

Anywhere in Country

At EY, we're all in to shape your future with confidence.

We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.  Join EY and help to build a better working world.

External

Role Description

** Role Family*
* Operational Technology Cybersecurity Architecture

** Primary Focus*
* Site-level architecture guidance, standards adherence, design validation, and technical risk advisory

** Seniority*
* Senior / Lead Architect

** Role Positioning*
* Senior OT security architecture advisor supporting secure and supportable industrial environments

** PRACTICE DESCRIPTION*
* Organizations operating industrial and operational technology environments require consistent application of cybersecurity standards, secure connectivity patterns, network segmentation practices, and operational support requirements across diverse site environments.

The Security Architect - OT role provides architecture guidance, design validation, and technical advisory support to help ensure OT environments are implemented and operated in alignment with established security requirements and approved design patterns.

** JOB SUMMARY*
* We are seeking an experienced Security Architect - Operational Technology (OT) to provide architecture guidance and technical oversight for industrial, manufacturing, laboratory, and operational technology environments.

This role supports site-level design reviews, network segmentation validation, secure connectivity planning, exception analysis, operational readiness, and risk-based technical decision-making. The architect works across cybersecurity, infrastructure, engineering, operations, and site teams to help ensure OT solutions are secure, supportable, and aligned to established standards.

** Role positioning:
** This role applies and interprets established architecture standards rather than defining enterprise standards or performing routine day-to-day governance queue execution.

** KEY RESPONSIBILITIES*
* ** Architecture Standards Adherence*
* + Apply established OT cybersecurity standards and approved design patterns to site-level implementations.

+ Review proposed OT network, firewall, secure access, monitoring, and infrastructure designs for alignment with approved standards.

+ Identify gaps between proposed implementations and established architecture requirements.

+ Recommend practical remediation options for design constraints, exceptions, or operational support concerns.

** Site-Level Design Review and Validation*
* + Support architecture reviews for site implementations, modernization activities, and operational changes.

+ Validate alignment with segmentation, zoning, firewall, remote access, monitoring, and operational support expectations.

+ Participate in design discussions for complex, high-risk, or non-standard OT implementations.

+ Partner with engineering and operations teams to support transition of approved designs into steady-state support.

** Risk and Exception Support*
* + Support technical risk assessments and impact analysis for non-standard architecture decisions.

+ Provide technical input for exception reviews, risk acceptance discussions, and remediation planning.

+ Escalate material design risks, control gaps, or operational concerns through appropriate governance channels.

+ Ensure architecture decisions and risk outcomes are documented and supportable.

** Secure Connectivity and Infrastructure Alignment*
* + Review secure connectivity patterns involving firewalls, remote access, segmentation controls, monitoring platforms, and related infrastructure.

+ Support alignment of applicable Zero Trust principles to OT users, devices, applications, and remote access use cases.

+ Advise on technical dependencies that may affect implementation, operations, lifecycle management, or supportability.

** Operational Readiness and Technical Advisory*
* + Validate that designs include monitoring, alerting, documentation, support records, and escalation considerations.

+ Support operational readiness discussions and post-implementation improvement activities.

+ Provide senior technical advisory support for complex OT security architecture decisions.

+ Develop reusable guidance, lessons learned, and implementation patterns based on site delivery experience.

** QUALIFICATIONS*
* + Bachelor's degree in Cybersecurity, Information Technology, Engineering, Computer Science, or related field preferred.

+ 8-10+ years of experience in cybersecurity, infrastructure, networking, industrial technology, or security architecture roles.

+ 5+ years supporting OT, manufacturing, industrial, engineering, laboratory, or critical infrastructure environments.

+ Strong understanding of network security, firewalls, segmentation, secure connectivity, remote access, and infrastructure support concepts.

+ Experience reviewing technical designs against established architecture standards and operational requirements.

+ Strong communication, documentation, stakeholder management,…