OT Security Architect / Consultant

Quariq; Lyon; Sur place; EUR 65 000 - 95 000; Plein temps

Résumé du poste

Quariq is seeking a Senior OT Security Architect / Consultant in Lyon. This role requires strong expertise in industrial cybersecurity and secure architecture design to support clients in enhancing their OT cybersecurity posture.

The incumbent will act as a trusted advisor, providing technical guidance and support for OT cybersecurity initiatives, including risk assessments, strategy development, and governance.

Qualifications

• Strong expertise in OT cybersecurity and industrial networking.
• Experience with design-level solutions for OT/IT integration.
• Fluent in French and professional English.

Responsabilités

• Provide technical leadership during architecture and consulting projects.
• Support customers in defining OT cybersecurity strategies.
• Conduct assessments and recommend improvements in cybersecurity posture.

Connaissances

OT cybersecurity expertise

Industrial networking knowledge

Analytical skills

Communication skills

Outils

Fortinet solutions

Cisco industrial networking

Palo Alto firewalls

Nozomi Networks

Description du poste

A senior, customer‑oriented OT Security Architect / Consultant with strong expertise in industrial cybersecurity, secure architecture design, and advisory services for complex industrial environments. This role combines deep technical knowledge with consulting capabilities, helping customers assess, design, and evolve their OT cybersecurity posture in a pragmatic and operationally realistic way.

The OT Security Architect / Consultant acts as a trusted advisor for customers and internal teams, supporting both strategic initiatives and technical solution definition. They understand industrial processes, legacy constraints, operational risks, and cybersecurity best practices, and are able to translate them into scalable, maintainable, and secure OT environments.

This role goes beyond implementation and focuses on architecture, consulting, risk reduction, governance, and technical leadership across OT cybersecurity projects.

Core Responsibilities

OT Security Consulting & Advisory

• Act as a trusted advisor for customers on OT cybersecurity topics
• Determine advisories and assess customer OT environments, cybersecurity maturity, and operational risks
• Support customers in defining OT cybersecurity strategies and roadmaps
• Conduct workshops, technical assessments, and advisory sessions
• Identify security gaps and propose realistic mitigation strategies
• Help customers balance cybersecurity, operational continuity, maintainability, and budget constraints
• Provide guidance aligned with industrial best practices and regulatory requirements

Support customers in areas such as

• OT network segmentation and zoning
• Secure remote access
• OT visibility and monitoring
• OT/IT convergence
• Asset inventory and risk management
• OT governance and cybersecurity maturity improvement

OT Security Architecture & Design

• Design and define secure OT architectures for industrial environments, including network segmentation aligned with Purdue / IEC 62443, secure connectivity between OT, IT, DMZ, cloud, and remote systems, firewall placement and rule design concepts, industrial network topologies and trust boundaries, secure infrastructure layouts for OT servers, applications, and virtualization platforms, and high‑availability and operational continuity considerations
• Produce architecture diagrams and technical documentation, high‑level and detailed technical designs, security recommendations and remediation plans, and technical standards and reference architectures

Risk Assessments & Compliance

• Lead or support OT cybersecurity assessments, including OT risk assessments, security posture reviews, architecture reviews, gap analyses against IEC 62443 or customer standards, and security improvement recommendations
• Support customers in defining remediation roadmaps, prioritizing mitigation actions, improving OT cybersecurity governance, and aligning with cybersecurity frameworks and standards

Technical Governance & Standards

• Define and promote OT security best practices and architectural standards, ensuring alignment with IEC 62443 and Purdue principles
• Review and validate OT security designs and technical approaches
• Support internal engineering teams with architectural guidance and contribute to reusable methodologies, templates, and design patterns
• Participate in internal capability development and knowledge sharing

Pre‑Sales & Customer Engagement Support

• Support pre‑sales and business development activities from a technical perspective, including participation in customer meetings and technical workshops, helping define solution scope and technical assumptions, supporting proposal creation and effort estimation, translating customer requirements into realistic technical solutions, and providing architecture guidance during bid and discovery phases
• Act as the technical bridge between customers, sales teams, delivery teams, OT engineers, and IT cybersecurity teams

Collaboration & Leadership

• Work closely with OT security engineers, automation and control system specialists, IT security teams, project managers, sales and account teams, and external partners and technology vendors
• Provide technical leadership during architecture and consulting activities, mentorship for junior engineers or consultants, guidance during critical project phases, and support during audits, design reviews, and customer escalations

Required Technical Expertise

• Strong expertise in OT cybersecurity and industrial networking, including SCADA, PLCs, DCS, industrial communication protocols, Purdue model and IEC 62443 concepts, network segmentation and zoning, firewall and DMZ architecture principles, secure remote access solutions, OT monitoring and asset visibility solutions, industrial network design and restructuring, and OT/IT integration concepts
• Hands‑on or design‑level experience with Fortinet solutions, Cisco industrial networking, Palo Alto firewalls, Nozomi Networks or similar OT monitoring platforms, Active Directory in hybrid IT/OT environments, virtualization and server infrastructure concepts
• Good understanding of continuous monitoring technologies, industrial operational constraints, risk management methodologies, and secure architecture principles

Soft Skills & Mindset

• Strong analytical and problem‑solving mindset
• Able to understand both technical and operational realities
• Excellent communication and consulting skills
• Comfortable engaging with technical and non‑technical stakeholders
• Pragmatic and solution‑oriented approach
• Structured thinker with strong documentation capabilities
• Collaborative and team‑oriented mindset
• Able to influence decisions through expertise and credibility
• Customer‑focused and business‑aware

Language & Location (France)

• French: native or near‑native level (mandatory)
• English: professional working proficiency (mandatory)
• Preferred location: Lyon or nearby

Availability for occasional travel within France and Europe is expected.

AG Solution is an Equal Opportunity Employer.