OT Security Architect

We are looking for aPrincipal OT Security Architect (Lead)to lead the development of enterprise Operational Technology cybersecurity standards, reference architectures, and security guidelines for regulated manufacturing environments.

You will act as the primary consultant defining OT security principles, network segmentation requirements, secure integration patterns, and governance standards, working closely with IT, OT, Engineering, Manufacturing, Quality, and Cybersecurity teams.

• Lead stakeholder workshops across IT, OT, Engineering, Manufacturing, Quality, and Cybersecurity teams.
• Define OT cybersecurity strategy, architecture principles, and governance frameworks.
• Develop Security Zones and Conduits methodologies aligned with IEC 62443.
• Define Defence-in-Depth security architecture using the Onion Model.
• Establish OT network segmentation and firewall architecture standards.
• Define secure connectivity requirements between OT, enterprise IT, and cloud environments.
• Develop OT identity and access management requirements, including privileged access controls.
• Establish cybersecurity requirements for vulnerability management and incident response.
• Ensure alignment with industry regulations, corporate standards, and data protection requirements.
• Lead technical reviews, governance forums, and document sign-off activities.

• 12+ years of cybersecurity experience, including7+ years specifically in OT/ICS cybersecurity.
• Experience inregulated manufacturing environments.
• Strong knowledge and practical application ofIEC 62443andNIST SP 800-82.
• Expertise in Industrial Control Systems and manufacturing cybersecurity.
• Experience conducting OT risk assessments and defining security governance.
• Strong understanding of thePurdue Model,industrial DMZ architectures, andnetwork segmentation.
• Expertise in firewall security architecture.
• Knowledge of identity and access management for OT environments.
• Experience with OT incident response.
• Ability to lead cross-functional workshops and translate security requirements into enterprise standards and reference architectures.

• Locations: New Jersey, USA or CEE region
• Contract Type:Freelance / Contract
• Start date:October, 2026
• Time Allocation:40 hours/week

Originally posted on Himalayas