OT Cybersecurity Architect

About the role

The OT Cybersecurity Architect is responsible for designing, implementing, and overseeing robust cybersecurity solutions within manufacturing and supply operational technology environments. The role protects industrial control systems, networks, and critical infrastructure from cyber threats while collaborating with engineering, IT, and operations teams to assess risks and enforce compliance.

Key responsibilities

• Develop and maintain OT cybersecurity architectures and frameworks tailored to industrial environments.
• Design and implement security controls such as network segmentation, access management, and intrusion detection systems to safeguard OT assets.
• Collaborate with cross‑functional teams to ensure cybersecurity requirements are incorporated into operational projects and processes.
• Continuously monitor emerging threats, assess new technologies, and recommend improvements to existing security measures.
• Provide expert guidance for incident response and recovery in the event of OT security breaches.
• Conduct regular assessments of OT environments to verify the effectiveness of security controls and compliance with regulatory standards.
• Participate in the development and review of cybersecurity policies, procedures, and documentation specific to the OT environment.
• Oversee secure system integration and lifecycle management of industrial assets, from installation through decommissioning.
• Evaluate security architecture for business solutions hosted within the OT environment.

Required profile

• Bachelor’s degree in computer science, engineering, or a related field; advanced degree preferred.
• 10+ years of overall experience with at least 7 years focused on cybersecurity in OT/industrial systems.
• Strong understanding of industrial protocols, SCADA architectures, and OT security frameworks such as the Purdue model.
• Relevant certifications such as CISSP, GICSP, or ISA/IEC 62443.

Required skills

• Industrial protocols
• SCADA architectures
• Purdue model security framework
• Network segmentation
• Access management
• Intrusion detection systems
• Incident response
• Security assessments and compliance