ARCHITECT - IOT Security

Role Summary:

• We are seeking an experienced OT Security Professional with strong expertise in OT Risk Assessments, Network Segmentation, Security Zoning, Industrial IDS Deployment, and OT Security Architecture. The candidate should have hands-on experience securing Industrial Control Systems (ICS), SCADA environments, and critical infrastructure while aligning security programs with IEC 62443 and NIST SP 800-82 standards.

  Key Responsibilities:

• Conduct OT Cyber Security Risk Assessments across industrial environments.
• Perform asset discovery, criticality assessment, and cyber risk analysis.
• Design and implement OT Network Segmentation and Security Zoning architectures.
• Develop Industrial DMZ architecture and secure remote access solutions.
• Deploy, configure, and optimize Industrial Intrusion Detection Systems (IDS) and monitoring solutions.
• Perform security gap assessments against IEC 62443 and NIST SP 800-82 requirements.
• Create OT Security policies, standards, and technical procedures.
• Review OT network architecture and recommend security improvements.
• Support incident response and threat hunting activities in OT environments.
• Coordinate with plant operations, engineering, and IT security teams on OT security initiatives.

• Develop road maps and cybersecurity improvement programs.

  Required Technical Skills:

• OT Security
• OT Security Risk Assessment
• Vulnerability Assessment & Risk Management
• OT Security Architecture Review

• Industrial Asset Discovery

  IT-OT Network Security:

• Network Segmentation
• Security Zoning & Conduits
• Industrial DMZ Design
• Firewall Rule Review

• Secure Remote Access

  Industrial IDS / Monitoring, Experience with one or more:

• Nozomi Networks
• Claroty
• Armis
• Dragos
• Cisco Cyber Vision

• Microsoft Defender for IoT

  Industrial Protocols Knowledge:

• Modbus
• DNP3
• OPC
• OPC-UA
• BACnet
• PROFINET
• EtherNet/IP

• IEC 61850

  Standards & Frameworks Knowledge & Strong understanding of:

• IEC 62443 Series
• NIST SP 800-82
• NIST Cyber Security Framework (CSF)
• ISA/IEC Security Models

• Purdue Reference Architecture

  Qualifications:

• Bachelor's Degree in Engineering, Computer Science, Information Security, or related field.

• Strong understanding of industrial automation and control systems.

  Added Advantage:

• IEC 62443 Fundamentals Specialist
• Nozomi Certified Engineer

• Claroty Certified Professional

  Desired Experience:

• Experience securing Manufacturing, Power & Utilities, Oil & Gas, Pharma, Metals, Mining, or Critical Infrastructure environments.
• Experience delivering OT security consulting and assessment engagements.
• Hands-on experience with industrial firewalls, segmentation projects, and OT monitoring deployments.

• Ability to interact with plant management, engineering teams, and executive stakeholders.

  Key Competencies:

• OT Risk Assessment
• Network Segmentation & Zoning
• IDS Deployment & Tuning
• IEC 62443 Compliance
• NIST 800-82 Framework Implementation
• Security Architecture Design
• Industrial Network Analysis
• Stakeholder Management
• Technical Documentation & Reporting