OT Security Architect / Consultant

AG Solution Group; Lyon; Hybride; EUR 90 000 - 120 000; Plein temps

Avantages offerts par ce poste

AG Academy

Equal Opportunity Employer

Occasional travel in France/Europe

Résumé du poste

AG Solution is seeking a senior OT Security Architect/Consultant to advise customers, design secure OT architectures, and lead governance initiatives. You will balance cybersecurity with operational needs, oversee risk reduction efforts, and guide projects end-to-end across OT networks, assets, and IT/OT convergence.

Based in Lyon, France, the role emphasizes practical security improvements, architecture leadership, and collaboration with engineering, IT, and field teams within a growing

Qualifications

• Strong expertise in OT cybersecurity and industrial networking.
• Ability to design secure OT architectures for industrial environments.
• Experience in governance, risk reduction, and technical leadership in OT projects.
• Proven consulting capabilities with a pragmatic approach to architecture.

Responsabilités

• Act as trusted advisor on OT cybersecurity topics for customers.
• Assess OT environments, maturity, and operational risks; define roadmaps.
• Lead workshops, assessments, and advisory sessions; identify gaps and mitigation.
• Design secure OT architectures with Purdue/IEC 62443 alignment and safe connectivity.
• Produce architecture diagrams, high-level/ detailed designs, and remediation plans.
• Participate in pre-sales, define scope, and translate requirements into solutions.

Connaissances

OT cybersecurity

Industrial networking

Security architecture

Consulting & advisory

Outils

Fortinet solutions

Cisco industrial networking

Palo Alto firewalls

Nozomi Networks

Active Directory (hybrid IT/OT)

VMware/Hyper-V in OT

Description du poste

A senior, customer-oriented OT Security Architect / Consultant with strong expertise in industrial cybersecurity, secure architecture design, and advisory services for complex industrial environments. This role combines deep technical knowledge with consulting capabilities, helping customers assess, design, and evolve their OT cybersecurity posture in a pragmatic and operationally realistic way.

The OT Security Architect / Consultant acts as a trusted advisor for customers and internal teams, supporting both strategic initiatives and technical solution definition. They understand industrial processes, legacy constraints, operational risks, and cybersecurity best practices, and are able to translate them into scalable, maintainable, and secure OT environments.

This role goes beyond implementation and focuses on architecture, consulting, risk reduction, governance, and technical leadership across OT cybersecurity projects.

Core Responsibilities

OT Security Consulting & Advisory

Act as a trusted advisor for customers on OT cybersecurity topics:

• Assess customer OT environments, cybersecurity maturity, and operational risks
• Support customers in defining OT cybersecurity strategies and roadmaps
• Conduct workshops, technical assessments, and advisory sessions
• Identify security gaps and propose realistic mitigation strategies
• Help customers balance cybersecurity, operational continuity, maintainability, and budget constraints
• Provide guidance aligned with industrial best practices and regulatory requirements

Support customers in areas such as:

• OT network segmentation and zoning
• Secure remote access
• OT visibility and monitoring
• OT/IT convergence
• Asset inventory and risk management
• OT governance and cybersecurity maturity improvement

OT Security Architecture & Design

Design and define secure OT architectures for industrial environments, including:

• Network segmentation aligned with Purdue / IEC 62443
• Secure connectivity between OT, IT, DMZ, cloud, and remote systems
• Firewall placement and rule design concepts
• Industrial network topologies and trust boundaries

Infrastructure & Systems Security

Design and assess the systems layer underpinning OT environments, including:

• OT server and virtualization platform architecture (hypervisor hardening, clustering, redundancy)
• Hardening baselines and golden image management for OT servers and engineering workstations
• Patch and vulnerability management strategy adapted to OT constraints (maintenance windows, validation cycles, legacy OS support)
• Backup and disaster recovery architecture for OT systems (SCADA/historian servers, engineering stations, configuration backups)
• Identity and access architecture in hybrid IT/OT environments (Active Directory design, trust boundaries, privileged access)
• Time synchronization architecture (NTP/PTP) supporting logging integrity and certificate validity
• High-availability and operational continuity design for critical OT systems

Produce:

• Architecture diagrams and technical documentation
• High-level and detailed technical designs
• Security recommendations and remediation plans
• Technical standards and reference architectures

Risk Assessments & Compliance

Lead or support OT cybersecurity assessments, including:

• OT risk assessments
• Security posture reviews
• Architecture reviews
• Gap analyses against IEC 62443 or customer standards
• Security improvement recommendations

Support customers in:

• Defining remediation roadmaps
• Prioritizing mitigation actions
• Improving OT cybersecurity governance
• Aligning with cybersecurity frameworks and standards

Technical Governance & Standards

Define and promote OT security best practices and architectural standards:

• Ensure alignment with IEC 62443 and Purdue principles
• Review and validate OT security designs and technical approaches
• Support internal engineering teams with architectural guidance
• Contribute to reusable methodologies, templates, and design patterns
• Participate in internal capability development and knowledge sharing

Pre-Sales & Customer Engagement Support

Support pre-sales and business development activities from a technical perspective:

• Participate in customer meetings and technical workshops
• Help define solution scope and technical assumptions
• Support proposal creation and effort estimation
• Translate customer requirements into realistic technical solutions
• Provide architecture guidance during bid and discovery phases

Act as the technical bridge between:

• Customers
• Sales teams
• Delivery teams
• OT engineers
• IT cybersecurity teams

Collaboration & Leadership

Work closely with:

• OT security engineers
• Automation and control system specialists
• IT security teams
• Project managers
• Sales and account teams
• External partners and technology vendors

Provide:

• Technical leadership during architecture and consulting activities
• Mentorship for junior engineers or consultants
• Guidance during critical project phases
• Support during audits, design reviews, and customer escalations

Required Technical Expertise

Strong expertise in OT cybersecurity and industrial networking, including:

• SCADA, PLCs, DCS, and industrial communication protocols
• Purdue model and IEC 62443 concepts
• Network segmentation and zoning
• Firewall and DMZ architecture principles
• Secure remote access solutions
• OT monitoring and asset visibility solutions
• Industrial network design and restructuring
• OT/IT integration concepts

Hands-on or design-level experience with:

• Fortinet solutions
• Cisco industrial networking
• Palo Alto firewalls
• Nozomi Networks or similar OT monitoring platforms
• Active Directory in hybrid IT/OT environments
• Virtualization and server infrastructure concepts

Systems and infrastructure competencies:

• OT server hardening and golden image practices
• Virtualization platforms (VMware, Hyper-V, Nutanix) in OT contexts
• Patch management approaches suited to industrial constraints
• Backup/DR concepts for OT-critical systems
• Active Directory and identity architecture in hybrid IT/OT environments

Good understanding of:

• Continuous monitoring technologies
• Industrial operational constraints
• Risk management methodologies
• Secure architecture principles

Soft Skills & Mindset:

• Strong analytical and problem-solving mindset
• Able to understand both technical and operational realities
• Excellent communication and consulting skills
• Comfortable engaging with technical and non-technical stakeholders

Language & Location (France)

• French: native or near-native level (mandatory)
• English: professional working proficiency (mandatory)
• Preferred location: Lyon or nearby

Availability for occasional travel within France and Europe is expected

Join AG Solution Where Talent Shapes Industry 4.0

At AG Solution, we build intelligent solutions for the process industry, combining automation, process control, data management, and MES/MOM systems to help manufacturers reach operational excellence.

Now part of the Quariq Group, we are one of Europe’s leading Industry 4.0 partners, with more than 400 engineers and consultants working across Europe, the UK, and the US.

Driven by People. Powered by Technology.

Our success starts with our people. We invest in growth through continuous learning, mentorship, and our AG Academy, ensuring every colleague has the opportunity to develop their skills and career. AG Solution is an Equal Opportunity Employer.

We believe that innovation happens when people feel trusted, connected, and inspired.

A Global Team with a Human Touch

With offices in over 15 cities worldwide, we bring together diverse expertise and perspectives — from Antwerp to Barcelona, Rotterdam to Lyon, and New York to Krakow.

At AG Solution, you’ll work on meaningful projects that drive efficiency, sustainability, and digital transformation for leading manufacturers worldwide.

Built to Scale. Driven by Talent.

Ready to shape the future of industry?
Explore our opportunities and grow with a team that’s redefining what’s possible.

#LI-CD1