OT/IT Security Architect for Critical Maritime Systems

Expleo Group; West of England; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Collaborative environment

ExpleoAcademy programs

Competitive benefits

Hybrid working

Job summary

Expleo Group seeks a seasoned security architect for OT and IT within complex defence-related programmes in the UK. You will define architecture, security zones, and risk-based controls across platforms.

Role requires IEC 62443 expertise, strong collaboration with engineering and safety teams, and experience with shipboard and critical infrastructure environments; SC clearance desirable.

Qualifications

• Education or certifications in security architecture or related discipline.
• Experience in UK defence/maritime or critical national infrastructure environments.
• Proven track record as an OT/IT security architect on complex programmes.

Responsibilities

• Develop security architecture for OT and IT across platforms.
• Define zones, conduits and target security levels per IEC 62443.
• Review network and communications security, resilience of remote links.
• Produce network security architecture with digital teams.
• Define trust boundaries, IAM, secure configurations, remote access.
• Build asset registers for configuration control and risk isolation.
• Support threat modelling and translate risk into controls.
• Ensure architecture is fail-safe with safety in mind.
• Provide design materials for reviews and gate outcomes.
• Engage with suppliers to land architectural requirements.

Skills

IEC 62443

Security architecture

OT/IT security

Risk assessment

Identity & access management

Secure remote access

Communication skills

TEMPEST awareness

Education

BSc/MSc in security/engineering

CISSP/CISM/CRISC or equivalent

TOGAF/ISO 27001 Lead Implementer

Tools

Threat modelling tools

Asset discovery tools

Job description

Expleo Group seeks a seasoned security architect for OT and IT within complex defence-related programmes in the UK. You will define architecture, security zones, and risk-based controls across platforms.

Role requires IEC 62443 expertise, strong collaboration with engineering and safety teams, and experience with shipboard and critical infrastructure environments; SC clearance desirable.