{"id":981446,"url":"https://alion.io/job/bloom-energy-ot-security-architect","title":"OT Security Architect","company":{"id":58473,"name":"Bloom Energy","domain":"bloomenergy.com","url":"https://alion.io/company/bloom-energy","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":88,"open_postings":29,"ghost_share":0,"stale_share":0.483,"repost_share":0,"time_to_fill_p50_days":58,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Newark, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":130400,"max":187600,"currency":"USD","period":"year","gross":null,"usd_annual":187600},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Defense in Depth","optional":false},{"name":"SIEM","optional":false},{"name":"Active Directory","optional":true},{"name":"DNP3","optional":true},{"name":"LIMS","optional":true},{"name":"Linux","optional":true},{"name":"OPC UA","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"VLAN","optional":true},{"name":"VPN","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-09-16T21:20:22Z","employer_posted_date":"2026-09-16","last_verified_at":"2026-11-09T03:49:39Z","board_verified":true,"closed_at":null,"days_open":53,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":53},"description":"At Bloom Energy, our vision for a world powered by clean, reliable, and affordable energy is more than just a dream-we’re making it reality.\nFor over two decades, we’ve been at the forefront of the global energy transition, pioneering solutions that empower critical industries to thrive in a rapidly digitizing, energy-intensive world. From revolutionizing power for AI-driven data centers to ensuring resilience for hospitals, electric grids, manufacturing facilities, and utilities, our solid oxide fuel cell (SOFC) and solid oxide electrolyzer (SOEC) technologies are redefining what’s possible by delivering energy abundance for all. With more than 30,000 fuel cell modules deployed worldwide, we are the trusted partner for Fortune 100 companies and innovators alike. Our cutting-edge solutions enable unparalleled “time-to-power” capabilities, reliability, and sustainability, ensuring our customers remain ahead in a world where soaring energy demand and intensifying energy scarcity are rapidly becoming the new norm.\nAt Bloom, we thrive on collaboration, bold thinking, and relentless innovation. We believe that, together, we can create a brighter, more sustainable future while tackling the most pressing challenges of the 21st century.\nWe are looking for an OT Security Architect to join our team in one of today’s most exciting technologies. This role will report toChief Security Officer based in Newark, Delaware. This is a fully on-site, 5 days in office role.\nRole and Responsibilities\nDeploy, configure, and tune OT security platforms across manufacturing sites endpoint protection, inline IPS, asset discovery, secure remote access, media scanning kiosks, and PLC backup including rulesets, allowlists, exclusions, and detection tuning on production assets.\nOwn operational health of deployed tooling: agent coverage, sensor health, license utilization, upgrades, and version currency.\nDesign and implement IT/OT convergence controls: OT DMZ at Level 3.5, brokered access, data flows, identity and directory integration, patching paths, and monitoring feeds.\nImplement defense-in-depth segmentation aligned to the Purdue model and ISA/IEC 62443 zone-and-conduit design, VLANs and rulesets, micro segmentation, and virtual patching for legacy assets partnering with Network Engineering on switching, routing, firewalls, wireless, IIoT, edge, and WAN.\nRun OT asset discovery and integrate telemetry into enterprise SIEM, EDR/XDR, NDR, and vulnerability management; maintain inventory and drive end-of-life OS remediation.\nImplement and test PLC/HMI backup, versioning, and golden-image recovery; support OT incident response and recovery, and lead POCs and production rollouts for new OT security technologies.\nSkills and Experience\nBachelor’s degree in Cybersecurity, Computer Science, Electrical Engineering, Industrial Engineering, Computer Engineering, or a related technical discipline, or equivalent hands-on experience. \n8+ years of cyber security, network, or infrastructure engineering experience, including 4+ years hands-on OT/ICS cyber security in production industrial or manufacturing environments. \nDemonstrated hands-on deployment and operation of OT security tooling at multiple sites. \nStrategy-only, advisory-only, or assessment-only backgrounds will not be considered. \nPreferred Qualifications and Technologies\nSecure Remote Access: brokered vendor and engineer access to Levels 0-3, session recording, MFA, jump hosts, browser isolation \nMalware Scanning Kiosks: USB and vendor media inspection at plant entry points, scan engines, sanitization, and media workflows \nOT Endpoint Security: OT-native anti-malware and application allows listing on HMIs, engineering workstations, and legacy or unsupported OS \nOT Backup: PLC/HMI and production equipment configuration backup, version control, and tested golden image restore on production assets \nNetwork Segmentation: OT DMZ at Level 3.5, zone-and-conduit design, VLAN-to-firewall migration, micro segmentation, inline IPS and virtual patching \nOT Vulnerability Management: passive and active OT asset discovery, risk-based prioritization, compensating controls for non-patchable assets \nPurdue Model: applied Levels 0-5 data-flow design and enforcement of trust boundaries across live plants \nTXOne, Claroty, Nozomi Networks, Dragos, Armis, KASM, Dispel, Salvador Technologies, OPSWAT, Octoplant, Cisco Cyber Vision / ISE / Catalyst IE, or equivalent OT security platforms. \nEnterprise security integration: SIEM, SOAR, XDR/EDR, NDR, PAM, and vulnerability management platforms. \nWindows and Linux server administration, Active Directory, virtualization, storage, backup, and hybrid cloud connectivity. \nLayer 2/3 switching and routing, VLANs, wireless, firewall rule design, NAT, VPN, and WAN connectivity. \nScripting and automation (PowerShell, Python) for deployment, configuration management, and reporting at scale. \nPLC platforms (Siemens, Rockwell, Schneider, GE, ABB), SCADA, and HMI systems.\nIndustrial protocols: Modbus, DNP3, Profinet, OPC/OPC-UA, EtherNet/IP, BACnet. \nApplied ISA/IEC 62443 and NIST SP 800-82: implementing controls, audit support, risk assessment, threat intelligence, and vulnerability management. \nMulti-site, multi-country manufacturing support experience; MES, historian, LIMS, and quality systems exposure. \nERC CIP audit or utility customer cyber security requirement support. \nCertifications: GICSP, GRID, GCIP, GPPA, ISA/IEC 62443 Fundamentals or Specialist, CISSP, CCNP or equivalent. \nAbility to work safely on production floors, onsite in Delaware, with travel up to 25% and off-hours work during maintenance windows. \nBloom Energy is an equal opportunity employer and makes employment decisions on the basis of merit. We are committed to compliance with all applicable laws providing equal employment opportunities. All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, national origin, protected veteran status, or on the basis of disability. Bloom Energy makes reasonable accommodations, consistent with applicable laws, for the known physical or mental limitations of an otherwise qualified applicant or employee with a disability, who can perform the essential job functions, unless undue hardship would result.\nAt Bloom Energy, we are committed to supporting the well-being of our employees and their families. Our comprehensive benefits package for eligible employees includes competitive Medical, Dental, and Vision plans with a large employer contribution, a 401(k) Retirement Plan with company match, generous Mental Health Support services, Legal services, virtual Physical Therapy access, and Fertility & Family Forming benefits.\nBloom Energy is committed to fair and equitable compensation practices. The total compensation for this position includes standard company benefits and is based on various factors including, but not limited to, relevant skills and experience.\nSalary Ranges:\n$130,400.00 - $187,600.00","description_format":"text","description_chars":7015,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Hydrogen Energy","Information Security","Alternative Fuels"],"lifecycle":[{"event":"open","at":"2026-09-16T21:20:22Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 49 · green card filings: 11","filings_12m":49,"filings_prev_12m":41,"green_card_filings_12m":11,"median_offered_wage_usd":182917,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":3}],"liveness":{"score":52,"band":"ok","label":"Likely open","p_open":1,"p_active":0.871,"p_room":0.6,"age_days":53,"expected_fill_days":58,"reasons":["conf:2","velocity","win:late","crowd:brand"],"computed_at":"2026-11-09T06:03:00Z"},"pay":{"stated_usd_annual":187600,"is_top_pay":false},"html_url":"https://alion.io/job/bloom-energy-ot-security-architect","json_url":"https://alion.io/job/bloom-energy-ot-security-architect.json","meta":{"generated_at":"2026-11-09T08:05:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6058,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58473},"rest":"https://alion.io/mcp/rest/get_company?id=58473"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbloom-energy-ot-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbloom-energy-ot-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbloom-energy-ot-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bloom-energy-ot-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbloom-energy-ot-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":981446}},{"tool":"search_jobs","arguments":{"company":"bloomenergy.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":981446},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}