We are seeking a highly experienced Operational Technology (OT) Architect to lead the design security and evolution of OT network environments supporting critical infrastructure operations. This role is responsible for establishing secure scalable and resilient OT architectures that align with industry standards and organizational cybersecurity strategies. The OT Architect will play a key leadership role in strengthening OT/IT integration implementing network segmentation and enhancing cybersecurity controls across industrial environments. This position works closely with engineering operations and IT teams to ensure safe reliable and secure system operations.
Key Responsibilities
Design and maintain secure scalable OT network architectures across multiple operational sites
Define standards for OT network segmentation aligned with the Purdue Model (ISA-95 / IEC 62443)
Lead the implementation of OT cybersecurity frameworks and architecture roadmaps
Develop and maintain architectural documentation standards and best practices
Design and deploy security solutions to protect OT systems including firewalls IDS/IPS endpoint protection and monitoring platforms
Architect and implement OT DMZ environments and secure remote access solutions (VPN MFA jump hosts)
Ensure secure integration between IT and OT systems while maintaining appropriate isolation and control
Design configure and oversee OT network infrastructure including Cisco switches routers and wireless systems
Manage firewall technologies (e.g. Fortinet Palo Alto WatchGuard) within OT environments
Support hybrid infrastructure including on-premise and cloud-based OT systems (e.g. AWS VPC environments)
Optimize network performance availability and resiliency
Collaborate with engineering and operations teams to integrate PLC DCS BMS and SIS systems securely
Support connectivity and cybersecurity for industrial protocols such as Modbus DNP3 OPC UA Ethernet/IP and PROFINET
Ensure secure deployment and operation of process historians and industrial data platforms
Conduct OT risk assessments threat modeling and vulnerability management
Ensure compliance with cybersecurity standards (NIST CSF NIST SP 800-82 IEC 62443 ISO 27001)
Support audit readiness incident response planning and disaster recovery initiatives
Establish and manage process control network (PCN) domains and access controls
Oversee implementation of monitoring tools (e.g. SIEM Claroty Nozomi) for threat detection
Analyze and respond to security events incidents and anomalies
Lead investigations and drive remediation efforts
Work cross-functionally with IT engineering and operations to ensure alignment and secure integration
Provide technical guidance and mentorship to OT analysts and engineers
Engage with vendors and third parties to ensure secure and compliant solutions
Stay current on emerging OT threats technologies and industry best practices
Drive innovation and modernization initiatives within OT environments
Assist in the development of training procedures and technical documentation
Qualifications
Bachelors degree in Computer Science Engineering Information Technology or a related field
3-5 years of experience designing and supporting OT/ICS network infrastructure and cybersecurity
Strong experience with industrial OT network design and segmentation
Hands-on expertise with Cisco networking (switches routers VLANs routing protocols)
Advanced experience with firewall administration and secure network architectures
Experience with Windows Server environments virtualization (Hyper-V/VMware) and Active Directory
Familiarity with cloud networking (AWS VPC EC2 S3)
Deep understanding of OT cybersecurity frameworks and standards (NIST IEC 62443 ISA ISO)
Experience with vulnerability management intrusion detection and incident response
Proven experience implementing secure network zoning and access controls
Experience with PLC DCS BMS and SIS systems (e.g. Rockwell Emerson ABB Honeywell)
Familiarity with OT monitoring and asset management tools (e.g. Claroty Nozomi)
Experience supporting process historians (e.g. AVEVA PI Canary) is an asset
Key Competencies
Strong analytical and problem-solving skills
Excellent communication skills with both technical and non-technical audiences
Ability to lead complex technical initiatives and influence stakeholders
Highly organized detail-oriented and self-driven
Strong collaboration skills across multidisciplinary teams
Commitment to safety and operational excellence
Primus Workforce ltd. provides safety- minded experienced professional personnel support throughout the energy construction and technical trades sectors to our clients long-term and short-term personnel requirements. We are a growing and dynamic company to work with providing the key to your future success.
OverviewWe are seeking a highly experienced Operational Technology (OT) Architect to lead the design security and evolution of OT network environments supporting critical infrastructure operations. This role is responsible for establishing secure scalable and resilient OT architectures that align wi...
Overview
We are seeking a highly experienced Operational Technology (OT) Architect to lead the design security and evolution of OT network environments supporting critical infrastructure operations. This role is responsible for establishing secure scalable and resilient OT architectures that align with industry standards and organizational cybersecurity strategies. The OT Architect will play a key leadership role in strengthening OT/IT integration implementing network segmentation and enhancing cybersecurity controls across industrial environments. This position works closely with engineering operations and IT teams to ensure safe reliable and secure system operations.
Key Responsibilities
Design and maintain secure scalable OT network architectures across multiple operational sites
Define standards for OT network segmentation aligned with the Purdue Model (ISA-95 / IEC 62443)
Lead the implementation of OT cybersecurity frameworks and architecture roadmaps
Develop and maintain architectural documentation standards and best practices
Design and deploy security solutions to protect OT systems including firewalls IDS/IPS endpoint protection and monitoring platforms
Architect and implement OT DMZ environments and secure remote access solutions (VPN MFA jump hosts)
Ensure secure integration between IT and OT systems while maintaining appropriate isolation and control
Design configure and oversee OT network infrastructure including Cisco switches routers and wireless systems
Manage firewall technologies (e.g. Fortinet Palo Alto WatchGuard) within OT environments
Support hybrid infrastructure including on-premise and cloud-based OT systems (e.g. AWS VPC environments)
Optimize network performance availability and resiliency
Collaborate with engineering and operations teams to integrate PLC DCS BMS and SIS systems securely
Support connectivity and cybersecurity for industrial protocols such as Modbus DNP3 OPC UA Ethernet/IP and PROFINET
Ensure secure deployment and operation of process historians and industrial data platforms
Conduct OT risk assessments threat modeling and vulnerability management
Ensure compliance with cybersecurity standards (NIST CSF NIST SP 800-82 IEC 62443 ISO 27001)
Support audit readiness incident response planning and disaster recovery initiatives
Establish and manage process control network (PCN) domains and access controls
Oversee implementation of monitoring tools (e.g. SIEM Claroty Nozomi) for threat detection
Analyze and respond to security events incidents and anomalies
Lead investigations and drive remediation efforts
Work cross-functionally with IT engineering and operations to ensure alignment and secure integration
Provide technical guidance and mentorship to OT analysts and engineers
Engage with vendors and third parties to ensure secure and compliant solutions
Stay current on emerging OT threats technologies and industry best practices
Drive innovation and modernization initiatives within OT environments
Assist in the development of training procedures and technical documentation
Qualifications
Bachelors degree in Computer Science Engineering Information Technology or a related field
3-5 years of experience designing and supporting OT/ICS network infrastructure and cybersecurity
Strong experience with industrial OT network design and segmentation
Hands-on expertise with Cisco networking (switches routers VLANs routing protocols)
Advanced experience with firewall administration and secure network architectures
Experience with Windows Server environments virtualization (Hyper-V/VMware) and Active Directory
Familiarity with cloud networking (AWS VPC EC2 S3)
Deep understanding of OT cybersecurity frameworks and standards (NIST IEC 62443 ISA ISO)
Experience with vulnerability management intrusion detection and incident response
Proven experience implementing secure network zoning and access controls
Experience with PLC DCS BMS and SIS systems (e.g. Rockwell Emerson ABB Honeywell)
Familiarity with OT monitoring and asset management tools (e.g. Claroty Nozomi)
Experience supporting process historians (e.g. AVEVA PI Canary) is an asset
Key Competencies
Strong analytical and problem-solving skills
Excellent communication skills with both technical and non-technical audiences
Ability to lead complex technical initiatives and influence stakeholders
Highly organized detail-oriented and self-driven
Strong collaboration skills across multidisciplinary teams
Commitment to safety and operational excellence
Primus Workforce ltd. provides safety- minded experienced professional personnel support throughout the energy construction and technical trades sectors to our clients long-term and short-term personnel requirements. We are a growing and dynamic company to work with providing the key to your future success.