Operational Technology (OT) SOC Lead – SCADA, Microsoft Sentinel, Azure & KQL

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Calgary; On-site; CAD 110,000 - 160,000; Full time

Job summary

Astra-North Infoteck Inc. is seeking an OT SOC Lead to manage security operations in ICS/OT environments in Calgary. You will oversee OT SOC activities, lead incident response, and coordinate with engineering teams to implement safeguards around Purdue Model and MITRE ATT&CK for IC OT.

The role requires hands-on experience with Microsoft Sentinel administration, KQL, and automation using Logic Apps, with a focus on cloud security in Azure.

Qualifications

• Experience leading OT security operations in ICS/OT environments.
• Proficient with Microsoft Sentinel administration and KQL.
• Knowledge of Purdue Model architecture and OT/ICS technologies.

Responsibilities

• Lead OT SOC operations and incident response.
• Automate workflows using Logic Apps/playbooks.
• Administer Microsoft Sentinel and Azure security controls.

Skills

OT SOC Lead

ICS/OT security

KQL

Cloud security

Azure security

MITRE ATT&CK for IC OT

Logic Apps automation

Tools

Microsoft Sentinel

Logic Apps

Azure

Job description

OT SOC Lead – Microsoft Sentinel, Azure, KQL &

On-site: Calgary, AB

• OT SOC Lead
• OT SOC operations
• Microsoft Sentinel administration
• Automation with Logic Apps/playbooks
• Cloud security (Azure)
• KQL
• Strong knowledge of Industrial Control Systems (ICS) and OT technologies such as SCADA, DCS, PLCs, HMI, OPC, Modbus, and Purdue Model architecture.
• MITRE ATT&CK for IC OT environments