Architect - OT Security (Network Security)

Persistent Systems; Pune District; Hybrid; INR 4,000,000 - 7,000,000; Full time

Benefits offered by this job

Competitive salary and benefits

Professional development opportunities

Company-sponsored higher education and

certifications

Flexible work hours

Long Service awards

Insurance coverage: group term life,个人

Job summary

Persistent Systems seeks an experienced OT Security Architect to lead secure IT/OT/cloud network design and implementation. You will drive Zero Trust initiatives, defend industrial networks, and align with IEC 62443, NERC CIP, NIST, and ISO 27017 in energy, utilities, and industrial automation contexts.

You will mentor teams, engage stakeholders, and present security recommendations to leadership while ensuring compliance and robust incident response readiness across hybrid environments.

Qualifications

• 10 to 15 years of experience in Cybersecurity, Network Security, OT Security, or Security Architecture roles.
• Strong expertise in OT/ICS security architecture and industrial network security design.
• Extensive experience implementing IEC 62443 security frameworks and defense-in-depth architectures.
• Deep understanding of Purdue Model architecture and OT zone/conduit segmentation principles.
• Hands-on experience with industrial firewall and gateway solutions including Palo Alto, Fortinet, Cisco, and Siemens Scalance.

Responsibilities

• Design and govern secure IT, OT, and cloud-connected network architectures aligned with industry security standards and operational requirements.
• Develop and implement defense-in-depth security strategies for OT and ICs environments.
• Define network segmentation, VLANs, DMZ architectures, routing, switching, VPNs, and secure remote access controls.
• Lead Zero Trust security initiatives including ZTNA, MFA, PAM, and identity-based access control implementation.
• Architect secure data flows between industrial systems, enterprise networks, cloud platforms, and remote operational environments.
• Design and implement secure cloud-connected OT architectures leveraging AWS security services and controls.
• Establish architecture guardrails, security standards, hardening baselines, and implementation best practices.
• Conduct threat modeling, security assessments, risk reviews, and vulnerability management activities.
• Support compliance assessments against IEC 62443, NERC CIP, NIST, ISO 27017, CRA, and customer-specific requirements.
• Design and review industrial firewall, gateway, IDS/IPS, and network security solutions.
• Lead troubleshooting and root-cause analysis for network security, segmentation, VPN, firewall, DNS, routing, and access-related issues.
• Secure and assess industrial communication protocols such as Modbus TCP, DNP3, OPC UA, and MQTT.
• Drive SIEM integration, monitoring, alert investigation, incident response, and security operations readiness.
• Collaborate with engineering, infrastructure, operations, cybersecurity, and business stakeholders.
• Provide technical leadership, mentoring, architecture governance, and customer-facing security consulting.
• Present security risks, mitigation plans, and architectural recommendations to leadership and clients.

Skills

OT Security

ICS Security

Network Security

Zero Trust

ZTNA

MFA

PAM

Identity Governance

Purdue Model

IEC 62443

NIST

AWS Security

SIEM

Industrial Firewalls

VLANs/DMZ

Tools

Palo Alto

Fortinet

Cisco

Siemens Scalance

Job description

We are seeking an experienced OT Security Architect with strong expertise in Operational Technology (OT), Industrial Control Systems (ICS), and Network Security to lead the design and implementation of secure, resilient, and compliant IT/OT/Cloud security architectures. The ideal candidate will play a critical role in protecting business-critical operational environments by implementing Zero Trust principles, securing industrial networks, and ensuring compliance with industry standards such as IEC 62443, NERC CIP, NIST, and ISO 27017. This role requires deep technical expertise, architecture leadership, stakeholder engagement, and hands-on experience in securing complex OT environments across energy, utilities, industrial automation, and cloud-connected operational platforms.

• Role: Architect - OT Security (Network Security)
• Location: All Persistent Locations
• Experience: 10 to 15 Years
• Job Type: Full Time Employment

What You'll Do:

• Design and govern secure IT, OT, and cloud-connected network architectures aligned with industry security standards and operational requirements.
• Develop and implement defense-in-depth security strategies for OT and ICs environments.
• Define network segmentation, VLANs, DMZ architectures, routing, switching, VPNs, and secure remote access controls.
• Lead Zero Trust security initiatives including ZTNA, MFA, PAM, and identity-based access control implementation.
• Architect secure data flows between industrial systems, enterprise networks, cloud platforms, and remote operational environments.
• Design and implement secure cloud-connected OT architectures leveraging AWS security services and controls.
• Establish architecture guardrails, security standards, hardening baselines, and implementation best practices.
• Conduct threat modeling, security assessments, risk reviews, and vulnerability management activities.
• Support compliance assessments against IEC 62443, NERC CIP, NIST, ISO 27017, CRA, and customer-specific requirements.
• Design and review industrial firewall, gateway, IDS/IPS, and network security solutions.
• Lead troubleshooting and root-cause analysis for network security, segmentation, VPN, firewall, DNS, routing, and access-related issues.
• Secure and assess industrial communication protocols such as Modbus TCP, DNP3, OPC UA, and MQTT.
• Drive SIEM integration, monitoring, alert investigation, incident response, and security operations readiness.
• Collaborate with engineering, infrastructure, operations, cybersecurity, and business stakeholders.
• Provide technical leadership, mentoring, architecture governance, and customer-facing security consulting.
• Present security risks, mitigation plans, and architectural recommendations to leadership and clients.

Expertise You'll Bring:

• 10 to 15 years of experience in Cybersecurity, Network Security, OT Security, or Security Architecture roles.
• Strong expertise in OT/ICS security architecture and industrial network security design.
• Extensive experience implementing IEC 62443 security frameworks and defense-in-depth architectures.
• Deep understanding of Purdue Model architecture and OT zone/conduit segmentation principles.
• Hands-on experience with network technologies including VLANs, routing, switching, segmentation, VPNs, and DMZ architectures.
• Strong knowledge of Zero Trust Architecture, ZTNA, MFA, PAM, identity governance, and access security controls.
• Experience with industrial firewall and gateway solutions including Palo Alto, Fortinet, Cisco, and Siemens Scalance.
• Expertise in IDS/IPS, SIEM integration, network monitoring, asset inventory, vulnerability management, and security operations.
• Strong knowledge of AWS security services including VPC, Security Groups, NACLs, WAF, private connectivity, logging, and monitoring.
• Experience designing and securing cloud-connected OT and Industrial IoT environments.
• Knowledge of industrial communication protocols including Modbus TCP, DNP3, OPC UA, and MQTT.
• Experience conducting security assessments, risk analysis, compliance reviews, and remediation planning.
• Strong troubleshooting and debugging capabilities across OT, IT, cloud, and hybrid environments.
• Experience supporting critical infrastructure, energy, utilities, renewable energy, SCADA, and industrial automation environments.
• Strong stakeholder management, communication, consulting, and leadership skills.
• Ability to lead architecture reviews, security governance initiatives, and strategic transformation programs.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."