Cyber SDC -Solution Architect - OT Monitoring & Security Tooling

Location:

Anywhere in Country

At EY, we're all in to shape your future with confidence.

We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.  Join EY and help to build a better working world.

Role Description

** Role Family*
* OT Operations Architecture / Monitoring & Tooling

** Primary Focus*
* OT monitoring, asset visibility, security tooling strategy, platform health, SOC integration, and operational maturity

** Seniority*
* Lead / Senior Solution Architect

** Role Positioning*
* Operations-oriented solution architecture role supporting OT monitoring and security tooling capabilities

** PRACTICE DESCRIPTION*
* Operational technology environments require sustained visibility, monitoring, security tooling, and operational integration to support stable, secure, and compliant operations. The Solution Architect - OT Monitoring & Security Tooling role provides technical leadership for the strategy, architecture, integration, and continuous improvement of monitoring, asset visibility, detection, and security enablement platforms used in industrial and operational technology environments.

This role works across operations, cybersecurity, platform engineering, asset management, network/security operations, SOC teams, vendors, and site stakeholders to improve monitoring coverage, platform health, event visibility, alert quality, and supportability across OT environments.

** JOB SUMMARY*
* We are seeking a senior  
** Solution Architect - OT Monitoring & Security Tooling
** to provide solution architecture leadership for OT monitoring, visibility, detection, and security tooling capabilities supporting industrial and operational technology environments.

The role is responsible for defining monitoring and tooling strategies, validating platform capabilities, identifying visibility gaps, guiding tool integrations, supporting incident and alert workflows, and aligning OT security tooling with operational support needs. The architect helps ensure monitoring platforms, asset visibility tools, security telemetry, alerting workflows, and operational integrations remain effective as the OT environment scales and matures.

This is a senior operations-oriented architecture role focused on platform strategy, monitoring maturity, integration alignment, technical advisory support, and continuous improvement. The role provides technical direction and solution guidance while partnering with operations teams responsible for day-to-day service execution.

** KEY RESPONSIBILITIES*
* ** OT Monitoring and Visibility Strategy*
* + Define and maintain OT monitoring, visibility, and security tooling strategies aligned to operational support needs.

+ Establish monitoring coverage expectations for OT environments, including asset visibility, network traffic monitoring, platform health, and event visibility.

+ Identify gaps in monitoring coverage, telemetry quality, alert fidelity, and visibility across site environments.

+ Develop recommendations to improve monitoring effectiveness, operational supportability, and security outcomes.

+ Partner with operations and cybersecurity teams to maintain a practical roadmap for monitoring and tooling maturity.

** Security Tooling Architecture and Platform Alignment*
* + Provide solution architecture leadership for OT monitoring, asset visibility, vulnerability, endpoint, remote access, and security enablement platforms.

+ Evaluate how OT monitoring platforms integrate with enterprise security services, SOC workflows, CMDB/asset platforms, and operational support tools.

+ Support architecture decisions for tooling integrations, data flows, alert routing, platform onboarding, and support model alignment.

+ Coordinate with platform owners and operational teams to improve platform health, coverage, usability, and lifecycle management.

+ Support standardization of monitoring and security tooling patterns across OT environments.

** Detection, Alerting, and SOC Integration*
* + Define monitoring and alerting requirements for OT security and operational support use cases.

+ Support development, tuning, and improvement of OT detection logic, alert workflows, escalation paths, and event triage processes.

+ Partner with SOC, incident response, and operations teams to improve the usability and actionability of OT alerts.

+ Review alert volumes, false-positive trends, visibility gaps, and escalation performance to drive continuous improvement.

+ Support integration of OT monitoring outputs with enterprise detection and response processes.

** Asset Visibility and Data Integration*
* + Support solution architecture for OT asset discovery, asset inventory enrichment, and visibility integration with operational systems of record.

+ Guide integration patterns between OT monitoring platforms, asset discovery tools, CMDB, service management platforms, vulnerability workflows, and reporting capabilities.

+ Identify opportunities to improve asset context, communication baselines, vulnerability…