IT-OT Infra Network Security Architect

Pyramid Global Technologies; Hong Kong; On-site; HKD 1,100,000 - 1,500,000; Full time

Job summary

Pyramid Global Technologies is seeking an IT-OT Infra Network Security Architect to lead secure integration of IT and OT networks across PLC/SCADA/DCS environments, servers, and manufacturing assets.

You will design network security controls, zoning, and segmentation, align with IEC 62443/NIST 800-82 standards, and collaborate with engineers to strengthen OT architecture in industrial settings.

Qualifications

• 8+ years of IT experience with ICS security.
• 6+ years securing PLC/SCADA/DCS/RT historians.
• Experience architecting IT/OT environments across servers, networks, and manufacturing equipment.
• Knowledge of WAN, LAN, TCP/IP, UDP, VPN, and firewalls.
• Understanding of network zoning, segmentation, and isolation designs.
• Foundation in IT security threat modeling and pen-testing.
• Familiar with IEC 62443 and NIST 800-82 standards.

Skills

ICS security

IT/OT architecture

Network security

Network segmentation

Threat modeling

Pen testing

IEC 62443

NIST 800-82

Industry protocols

Cisco/Firewall

Job description

About the job IT-OT Infra Network Security Architect

Job Description:

Must Have:

• 8+ year of IT Experience 6 +in-depth experience of securing Industrial Control Systems (ICS) like PLC, SCADA, DCS, Real time historians.
• Experience in architecting in and IT or OT environment, including servers, network, workstations, and manufacturing equipment
• Experience in WAN, LAN, TCP/IP, UDP, VPN, B2B, Firewall technologies
• Experience in design and deployment of network security controls in enterprise network or industrial networks, including network zoning, segmentation and isolation designs and implementation.
• Ideally a solid foundation in ICS support which was build up with IT topics like network architectures, network protocols, Industrial protocols, Active Directory, Backup processes, virtualization of applications and other general IT knowledge experience in network monitoring, network visibility, traffic analysis and performance analysis of LAN/WAN, site labs, factories, file servers, and such network-dependent installations.
• Fundamental knowledge in IT-Security threat modeling, vulnerability assessments and pen-testing.
• Knowledge of related standards like IEC 62443, NIST 800-82

Good-to-Have:

• Professional ICS / OT security certification like GICSP, or IT
• security certifications like CISSP.
• Expert level certifications (Network security - e.g., CCIE Security)
• Expertise in Cisco Networking, Checkpoint firewalls and Tufin
• Orchestration preferred
• Exposure to industrial network ports & protocols (such as DNP3,
• Modbux, Profibus, LonWorks, DALI, BACnet, KNX, EnOcean, etc.)
• Ability to collaborate with computer engineers, production
• engineers and OT and IT professionals to develop strategies for
• effective OT architecture; Experience in IT/OT cooperation or
• IT/OT alignment in the modern industrial setting.