Architect - OT Security (Network Security)

Persistent; Pune District; On-site; INR 4,200,000 - 7,000,000; Full time

Benefits offered by this job

Competitive salary

Hybrid work flexibility

Education & certification sponsorship

Health checks

Insurance coverage

Job summary

Persistent is seeking an experienced OT Security Architect to lead the design of secure IT/OT/cloud network architectures. You will drive defense-in-depth strategies across OT/ICS environments, define segmentation, and implement Zero Trust controls, MFA, and PAM.

Experience with industrial protocols and AWS security is essential for this role. You will collaborate with engineering, operations, and security teams to ensure compliance with IEC 62443, NERC CIP, NIST, ISO 27017, and customer

Qualifications

• 10–15 years of experience in Cybersecurity, Network Security, OT Security, or Security Architecture roles.
• Strong expertise in OT/ICS security architecture and industrial network security design.
• Extensive experience implementing IEC 62443 security frameworks and defense-in-depth architectures.

Responsibilities

• Design and govern secure IT, OT, and cloud-connected network architectures aligned with industry security standards and operational requirements.
• Develop and implement defense-in-depth security strategies for OT and ICs environments.
• Define network segmentation, VLANs, DMZ architectures, routing, switching, VPNs, and secure remote access controls.
• Lead Zero Trust security initiatives including ZTNA, MFA, PAM, and identity-based access control implementation.
• Architect secure data flows between industrial systems, enterprise networks, cloud platforms, and remote operational environments.
• Design and implement secure cloud-connected OT architectures leveraging AWS security services and controls.
• Establish architecture guardrails, security standards, hardening baselines, and implementation best practices.
• Conduct threat modeling, security assessments, risk reviews, and vulnerability management activities.
• Support compliance assessments against IEC 62443, NERC CIP, NIST, ISO 27017, CRA, and customer-specific requirements.
• Design and review industrial firewall, gateway, IDS/IPS, and network security solutions.
• Lead troubleshooting and root-cause analysis for network security, segmentation, VPN, firewall, DNS, routing, and access-related issues.
• Secure and assess industrial communication protocols such as Modbus TCP, DNP3, OPC UA, and MQTT.
• Drive SIEM integration, monitoring, alert investigation, incident response, and security operations readiness.
• Collaborate with engineering, infrastructure, operations, cybersecurity, and business stakeholders.
• Provide technical leadership, mentoring, architecture governance, and customer-facing security consulting.
• Present security risks, mitigation plans, and architectural recommendations to leadership and clients.

Skills

OT Security

Network Security

ICS Security

Zero Trust

IEC 62443

Purdue Model

ZTNA

MFA

PAM

VPNs

IDS/IPS

SIEM

AWS Security

Industrial Protocols

Threat Modeling

Risk Assessment

Compliance

Education

Experience in Cybersecurity/Network Security/OT Security

Tools

Palo Alto

Fortinet

Cisco

Siemens Scalance

OPC UA gateways

Job description

About Position:

We are seeking an experienced OT Security Architect with strong expertise in Operational Technology (OT), Industrial Control Systems (ICS), and Network Security to lead the design and implementation of secure, resilient, and compliant IT/OT/Cloud security architectures. The ideal candidate will play a critical role in protecting business-critical operational environments by implementing Zero Trust principles, securing industrial networks, and ensuring compliance with industry standards such as IEC 62443, NERC CIP, NIST, and ISO 27017. This role requires deep technical expertise, architecture leadership, stakeholder engagement, and hands-on experience in securing complex OT environments across energy, utilities, industrial automation, and cloud-connected operational platforms.

• Role: Architect - OT Security (Network Security)
• Location: All Persistent Locations
• Experience: 10 to 15 Years
• Job Type: Full Time Employment

What You'll Do:

• Design and govern secure IT, OT, and cloud-connected network architectures aligned with industry security standards and operational requirements.
• Develop and implement defense-in-depth security strategies for OT and ICs environments.
• Define network segmentation, VLANs, DMZ architectures, routing, switching, VPNs, and secure remote access controls.
• Lead Zero Trust security initiatives including ZTNA, MFA, PAM, and identity-based access control implementation.
• Architect secure data flows between industrial systems, enterprise networks, cloud platforms, and remote operational environments.
• Design and implement secure cloud-connected OT architectures leveraging AWS security services and controls.
• Establish architecture guardrails, security standards, hardening baselines, and implementation best practices.
• Conduct threat modeling, security assessments, risk reviews, and vulnerability management activities.
• Support compliance assessments against IEC 62443, NERC CIP, NIST, ISO 27017, CRA, and customer-specific requirements.
• Design and review industrial firewall, gateway, IDS/IPS, and network security solutions.
• Lead troubleshooting and root-cause analysis for network security, segmentation, VPN, firewall, DNS, routing, and access-related issues.
• Secure and assess industrial communication protocols such as Modbus TCP, DNP3, OPC UA, and MQTT.
• Drive SIEM integration, monitoring, alert investigation, incident response, and security operations readiness.
• Collaborate with engineering, infrastructure, operations, cybersecurity, and business stakeholders.
• Provide technical leadership, mentoring, architecture governance, and customer-facing security consulting.
• Present security risks, mitigation plans, and architectural recommendations to leadership and clients.

Expertise You'll Bring:

• 10 to 15 years of experience in Cybersecurity, Network Security, OT Security, or Security Architecture roles.
• Strong expertise in OT/ICS security architecture and industrial network security design.
• Extensive experience implementing IEC 62443 security frameworks and defense-in-depth architectures.
• Deep understanding of Purdue Model architecture and OT zone/conduit segmentation principles.
• Hands-on experience with network technologies including VLANs, routing, switching, segmentation, VPNs, and DMZ architectures.
• Strong knowledge of Zero Trust Architecture, ZTNA, MFA, PAM, identity governance, and access security controls.
• Experience with industrial firewall and gateway solutions including Palo Alto, Fortinet, Cisco, and Siemens Scalance.
• Expertise in IDS/IPS, SIEM integration, network monitoring, asset inventory, vulnerability management, and security operations.
• Strong knowledge of AWS security services including VPC, Security Groups, NACLs, WAF, private connectivity, logging, and monitoring.
• Experience designing and securing cloud-connected OT and Industrial IoT environments.
• Knowledge of industrial communication protocols including Modbus TCP, DNP3, OPC UA, and MQTT.
• Experience conducting security assessments, risk analysis, compliance reviews, and remediation planning.
• Strong troubleshooting and debugging capabilities across OT, IT, cloud, and hybrid environments.
• Experience supporting critical infrastructure, energy, utilities, renewable energy, SCADA, and industrial automation environments.
• Strong stakeholder management, communication, consulting, and leadership skills.
• Ability to lead architecture reviews, security governance initiatives, and strategic transformation programs.

Benefits:

• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Annual health check-ups
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

Let's unleash your full potential at Persistent-persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."