IT Cyber Security Architect, Plant Infrastructure

Recurrent Energy; Kitchener; On-site; CAD 120,000 - 180,000; Full time

Job summary

Canadian Solar is seeking an experienced Cybersecurity Architect with a strong OT focus to design and implement comprehensive security strategies across OT and IT environments. You will ensure compliance with NERC CIP standards while protecting critical infrastructure and assets.

The role requires 7–10 years in OT cybersecurity, expertise in network design, and experience deploying security solutions. Collaboration with IT, operations, and engineering teams is essential to align security with

Qualifications

• 7-10 years of cybersecurity architecture experience in OT environments.
• Deep knowledge of NERC CIP requirements and energy/utility contexts.
• Experience designing and implementing security solutions in complex OT/IT spaces.
• Certifications in CISSP, CISM, CRISC or vendor-specific credentials preferred.

Responsibilities

• Develop OT cybersecurity strategy aligned with business goals and critical assets.
• Manage compliance with NERC CIP standards across systems and processes.
• Design and enhance IT/OT network architectures with security controls.
• Perform risk assessments and translate findings into actionable mitigations.
• Lead deployment of IDS, firewalls, access controls, and encryption.
• Collaborate with IT, operations, engineering, and compliance teams.
• Develop incident response plans for OT environments and coordinate responses.
• Raise security awareness through trainings for staff and partners.
• Evaluate third-party vendors for cybersecurity posture.

Skills

OT security architecture

NERC CIP compliance

Network design

Risk assessment

Security solutions deployment

Incident response planning

Security awareness training

Vendor assessment

Education

Bachelor's degree in Computer Science/Information Security

Master's degree preferred

Tools

CISSP

CISM

CRISC

CCIE

PCNSE

Job description

At Canadian Solar, our vision is to make lives better by bringing electricity powered by the sun to millions of people worldwide. As a leading manufacturer of solar panels, inverters, and energy storage solutions, we’ve been an industry front-runner since our founding in 2001. Our commitment to sustainability is reflected in all parts of our organization as we navigate the complexities of a booming industry.

Throughout Canadian Solar’s subsidiaries, e-Storage, Recurrent Energy, MSS and CSI Solar Co., we invest in our employees’ growth. Our training programs and promotional opportunities ensure we all can continue to learn. We understand the importance of work-life balance and provide various flexible work options to support our employees’ well-being. Join our team to “Make the Difference” by creating a lasting positive impact on the world and the communities where we operate.

Position Summary:

We are seeking an experienced and skilled Cybersecurity Architect with a strong background in Operational Technology (OT), compliance, NERC (North American Electric Reliability Corporation) standards, and network design. The successful candidate will be responsible for designing and implementing comprehensive cybersecurity strategies, solutions, and architectures to safeguard our organization’s critical infrastructure and assets. The role involves collaborating with cross-functional teams to ensure compliance with industry regulations, standards, and best practices.

Responsibilities

• 1. OT Cybersecurity Strategy: Develop and execute holistic cybersecurity strategies tailored to the unique challenges of Operational Technology environments, focusing on protecting critical assets, ensuring availability, and preventing unauthorized access.
• 2. Compliance Management: Stay abreast of relevant regulations and standards, particularly NERC CIP (Critical Infrastructure Protection) standards, and ensure the organization’s systems, processes, and procedures are aligned with compliance requirements.
• 3. Network Architecture : Design, review, and enhance network architectures for both IT and OT environments, incorporating security measures that prevent unauthorized intrusion, data breaches, and other cyber threats.
• 4. Risk Assessment: Conduct thorough risk assessments to identify vulnerabilities and potential threats within the OT landscape. Translate findings into actionable security recommendations and solutions.
• 5. Security Solutions Implementation: Lead the deployment of advanced security solutions, including intrusion detection systems, firewalls, access controls, and encryption mechanisms, to safeguard critical infrastructure.
• 6. Collaboration: Collaborate with cross-functional teams, including IT, operations, engineering, and compliance, to align cybersecurity initiatives with business goals, operational needs, and regulatory requirements.
• 7. Incident Response Planning: Develop and maintain robust incident response plans specific to OT environments. Coordinate with incident response teams to ensure a swift and effective response to security incidents.
• 8. Security Awareness: Raise awareness and provide training to employees, contractors, and partners about OT cybersecurity best practices, policies, and procedures.
• 9. Vendor Assessment: Evaluate the security posture of third-party vendors and partners, ensuring that their solutions and services meet cybersecurity standards.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field; Master’s degree preferred.
• A minimum of 7-10 years of experience in cybersecurity architecture with a focus on OT environments, compliance, NERC CIP standards, and network design.
• Profound knowledge of NERC CIP requirements and their practical application in energy/utility sectors.
• Strong expertise in designing and implementing security solutions in complex OT environments especially in the renewables industry.
• In-depth understanding of network protocols, architecture, and segmentation strategies.
• Professional certifications such as CISSP, CISM, CRISC, or relevant vendor‑specific certifications (e.g., Cisco CCIE, Palo Alto PCNSE) preferred.
• Proven experience with security frameworks such as NIST / NIST 2 Cybersecurity Framework, ISA/IEC 62443, or ISO 27001.
• Excellent communication skills, both written and verbal, with the ability to articulate technical concepts to non‑technical stakeholders.