IT/OT Technical Architect

Cognizant; Greater London; Hybrid; GBP 110,000 - 170,000; Full time

Job summary

Cognizant is seeking an IT/OT Technical Architect to lead global OT cybersecurity and network modernization initiatives from London. You will govern HLD/LLD across ISA-95, Purdue Model, and IEC 62443, drive risk assessments, and manage remediation plans with site teams and partners.

The role requires strong collaboration with OEMs and cybersecurity vendors, plus governance board presentations and incident-readiness support. Hybrid work in London is available.

Qualifications

• Hands-on OT network architecture and segmentation experience.
• Experience with ISA/IEC 62443, Purdue Model, and NIST 800-82.
• Experience leading global, cross-functional teams.
• Strong stakeholder management and governance skills.
• Knowledge of industrial protocols (OPC, Modbus, EtherNet/IP).

Responsibilities

• Lead OT cybersecurity and network transformation projects globally.
• Develop and govern OT HLD/LLD per standards.
• Conduct OT risk assessments, threat modelling, gap analysis.
• Drive network segmentation, micro-segmentation and firewall policies.
• Oversee vulnerability management and system hardening.
• Collaborate with site teams, OEMs, vendors, and partners.
• Present risks, remediation plans, to governance boards.
• Support OT service management and incident readiness.

Skills

OT Network Engineering

OT Cybersecurity

Industrial Systems Architecture

ISA-95

IEC 62443

Purdue Model

NIST 800-82

Firewall technologies

Vulnerability management

Cross-functional leadership

Tools

Armis

Nozomi

Cisco Cyber Vision

Palo Alto

Fortinet

SIEM

Job description

IT/OT Technical Architect

Location: London, UK
Employment Type: Full-time
Work Model: Hybrid

About the Role

The role will lead OT cybersecurity, network modernization, and remediation initiatives across multiple manufacturing sites globally. The candidate will be responsible for architecture governance, cybersecurity assessments, remediation planning, stakeholder management, and successful delivery of OT transformation programs.

Key Responsibilities

• Lead OT cybersecurity and network transformation projects across manufacturing and industrial environments.
• Develop and govern OT High-Level and Low-Level Designs (HLD/LLD) aligned to ISA-95, Purdue Model, and IEC 62443 standards.
• Conduct OT cybersecurity risk assessments, threat modelling, gap assessments, and remediation planning.
• Drive network segmentation and micro-segmentation initiatives, including firewall policy design and governance.
• Lead vulnerability management, system hardening, patch governance, and OT security compliance activities.
• Collaborate with site engineering teams, OEMs, infrastructure vendors, application vendors, and cybersecurity partners.
• Present technical solutions, risks, remediation plans, and architecture recommendations to senior stakeholders and governance boards.
• Support OT service management, incident response readiness, asset visibility, and continuous improvement initiatives.

Required Qualifications

• Strong experience in OT Network Engineering, OT Cybersecurity, or Industrial Systems Architecture.
• Strong knowledge of IEC 62443, ISA-95, Purdue Model, NIST 800-82, and OT cybersecurity best practices.
• Hands-on experience in OT network architecture, zoning and conduits, micro-segmentation, firewall technologies, and secure IT/OT integration.
• Experience with OT cybersecurity tools such as Armis, Nozomi, Cisco Cyber Vision, Palo Alto, Fortinet, SIEM platforms, or similar solutions.
• Strong understanding of industrial control systems including Rockwell, Siemens, Honeywell, ABB, and associated industrial protocols (OPC, Modbus, EtherNet/IP, etc.).
• Experience in vulnerability management, cybersecurity assessments, OT system hardening, Active Directory security, backup and disaster recovery solutions.
• Proven capability in leading global, cross-functional teams and managing client, vendor, and stakeholder engagements.
• Excellent communication, consulting, and leadership skills with experience driving large-scale remediation and transformation programs.

Preferred Qualifications

• ISA/IEC 62443 (Fundamentals, Risk Assessment, Design, or Expert)
• CCNP / CCIE
• CISSP, GICSP, GIAC, or equivalent cybersecurity certifications
• Nozomi, Palo Alto, Fortinet, or other OT security certifications

Preferred Industry Experience

• FMCG / Manufacturing
• OT Cybersecurity Programs
• Industrial Automation & Controls

Critical Infrastructure

• CI/CD: GitHub Actions, Jenkins