Security Solution Architect - OT (Operational Technology)

Do you combine deep OT cybersecurity expertise with architectural judgement to protect industrial environments without compromising safety, availability or operational continuity? As Security Solution Architect focused on Operational Technology (OT), part of our Security & Networking Architecture team, you are a senior, customer-facing technical authority for industrial and cyber-physical environments. You own solution architecture and design authority from discovery through delivery, translating business, operational, safety and security requirements into practical target architectures, high-level designs and implementation guidance. You connect IT and OT stakeholders to develop secure, resilient and supportable solutions that respect legacy systems, long asset lifecycles and production constraints. You work directly on customer engagements and provide specialist OT architecture expertise to opportunities led by the Solution Pre-Sales team.

• Lead customer discovery, site assessments and architecture workshops with OT asset owners, plant engineering, operations, IT and security teams to clarify critical processes, requirements, constraints, dependencies and risks.
• Define OT security target architectures, standards, patterns, high-level designs and implementation guidance, for secure, resilient and operable solutions.
• Act as OT security design authority, governing design decisions, reviewing solution artefacts and managing exceptions, compensating controls, in line with operational and safety constraints.
• Guide engineering and project teams through implementation; validate detailed designs, testing and runbooks, and confirm alignment with the approved architecture before operational handover.
• Identify and address OT security, integration and operational risks. Design controls for asset visibility, secure remote and vendor access, IT/OT boundaries, monitoring, hardening and vulnerability management and recovery.
• Provide validated OT solution architecture inputs to the Solution Pre-Sales team, including technical designs, options, assumptions, dependencies, risks and delivery estimates.
• Partner with Product Management to evolve OT security services, reference architectures, blueprints, patterns, costing models and industry-specific propositions.
• Maintain reusable OT architecture assets, coach colleagues and contribute to industrial security technology-partner relationships and team capability.

• Substantial experience designing and delivering security solutions for OT or industrial environments, with senior-level technical credibility and customer-facing consulting experience.
• Deep understanding of industrial control systems, including PLCs, SCADA, DCS and HMIs, industrial protocols and IT/OT integration, with practical knowledge of ISA/IEC 62443, the Purdue model and risk-based application of zones and conduits.
• Strong knowledge of industrial networking, segmentation, firewalls, secure remote access, OT asset discovery and monitoring, and integration with identity services and security operations. Understand the implications of control selection for safety, availability, reliability and real-time operations.
• Demonstrated ability to produce and govern OT high-level designs and review detailed designs, implementation plans, testing and rollback approaches, and operational documentation. Experience assessing brownfield environments, legacy technology and vendor support constraints.
• Experience supporting dedicated presales teams with OT architecture, effort and cost inputs, assumptions, dependencies and risks, and explaining technical choices to plant operations, engineering, IT, security and business stakeholders.
• Strong architectural thinking, technical leadership, consulting, communication and collaboration skills, with sound commercial awareness.
• Excellent written and spoken English, additional languages are an asset.
• Relevant OT security certifications, such as ISA/IEC 62443 or GIAC GICSP, relevant vendor certifications and additional languages are assets.
• Relevant higher education or equivalent professional experience in cybersecurity, industrial automation, control systems, electrical engineering, networking or architecture.