OT Security Architect

Lonza Group; Hyderabad; On-site; INR 4,500,000 - 7,500,000; Full time

Job summary

Lonza Group seeks an OT Security Architect to strengthen security architecture for IT and OT solutions across on‑premises, cloud (Azure), and integrations. You will guide design and build phases to ensure secure implementation in OT environments, with strong emphasis on risk mitigation and secure development practices.

The role requires expertise in IT/OT security architecture, cloud security in Azure, IAM, encryption, and secure data handling, aligned with Lonza’s security standards and

Qualifications

• Bachelor's or Master’s degree in Computer Science, Information Security, IT, or related field.
• Thought leadership and good practice security understanding in OT and IT security.
• Initial experience with leveraging AI tools.
• Strong experience in IT and OT security architecture across infrastructure, applications, and integrations.
• Experience with cloud environments, particularly Microsoft Azure, and cloud security principles.

Responsibilities

• Conduct Security Architecture Reviews for IT and OT solutions including cloud (Azure) and integrations.
• Assess and validate security controls (authentication, logging, encryption, API security).
• Identify risks and advise on mitigations before deployment.
• Provide security advisory to project teams during design and build phases with security-by-design principles.
• Review integrations and APIs for secure data exchange and protection mechanisms.
• Assist teams in producing clear architecture documentation and diagrams.
• Collaborate with stakeholders to convey security concepts clearly.

Skills

OT security fundamentals

Security architecture

Network segmentation

Risk assessment

Security-by-design

Cloud security (Azure)

IAM

Encryption & data protection

Secure development

Education

Bachelor’s or Master’s degree in CS/Info Security

Tools

Azure

Job description

The OT Security Architect is responsible for reviewing, assessing, and strengthening the security architecture of IT and Operational Technology (OT) solutions across on-premises, cloud, and integration environments. The role ensures that systems are designed and implemented according to security standards, hardening guidelines, and industry best practices. By supporting project teams during design and build phases, the OT Security Architect helps ensure secure implementation from the outset, while adapting controls to the unique operational constraints and risk profiles of OT environments. The position also contributes to improving technical documentation practices and promotes secure development principles throughout the lifecycle.

What You Will Do

Security Architecture Reviews

• Conduct Security Architecture Reviews for new and existing IT and OT solutions, including infrastructure, cloud (Azure), applications, and integrations
• Assess and validate security controls for solution architectures (authentication, logging, encryption, API security, secure integration patterns)
• Identify security risks and advise on mitigation measures to ensure solutions meet required protection levels before deployment

Project & Solution Support

• Provide security advisory to project teams during design and build phases, ensuring security-by-design principles are applied
• Review integrations and APIs to ensure secure data exchange and appropriate protection mechanisms for services and external connections
• Evaluate and recommend security measures tailored to operational constraints and risk profiles of OT environments

Secure Development Practices

• Ensure secure coding principles and application security controls
• Ensure secure handling of data within applications and services
• Ensure teams in adopting secure development practices across the lifecycle
• Assist teams in producing clear and accurate technical architecture documentation, including diagrams
• Provide guidance, tools, or automation to improve documentation quality
• Collaborate with stakeholders to ensure security concepts are clearly communicated and understood

Critical Job Requirements

• OT Security Fundamentals: Understanding of industrial systems (ICS/SCADA) and their risks
• Security Architecture: Ability to design/review IT and industrial system architectures and identify security risks
• Network Segmentation: Expertise in securing boundaries between IT and OT environments using firewalls and secure connectivity
• Risk Assessment: Skilled in identifying risks while considering operational constraints and availability requirements
• Security-by-Design: Proven ability to integrate security controls early in solution design and adapt them to real-world operational limitations
• Cloud Security (Azure): Experience securing cloud services including access, network, and configuration management
• Identity & Access Management (IAM): Managing users, roles, permissions, and multi-factor authentication (MFA)
• Encryption & Data Protection: Protecting sensitive data at rest and in transit

What We Are Looking For

• Bachelor’s or Master’s degree in Computer Science, Information Security, IT, or related field (or equivalent experience)
• Thought leadership and good practice security understanding in OT security as well as IT security
• Initial experience and understanding in leveraging AI tools
• Strong experience in IT and OT security architecture across infrastructure, applications, and integrations
• Experience with cloud environments, particularly Microsoft Azure, and cloud security principles
• Knowledge of security controls for on-premises infrastructure (system hardening, network segmentation, identity management, logging)
• Experience reviewing integrations and APIs with secure authentication and data protection practices
• Understanding of application security and secure development principles

Skills

• Strong analytical and problem-solving skills for complex technical environments
• Ability to work autonomously and manage priorities across multiple reviews and projects
• Excellent written and verbal communication skills for technical and non-technical stakeholders
• Strong organizational and coordination skills (scheduling, follow-ups, tracking outcomes)
• Team-oriented mindset with a collaborative approach
• Positive attitude, adaptability to new technologies, and evolving security challenges
• Strong attention to detail in reviewing documentation and designs

About Lonza

At Lonza, our people are our greatest strength. With more than 30 sites across five continents, our globally connected teams work together every day to manufacture the medicines of tomorrow. Our core values—Collaboration, Accountability, Excellence, Passion, and Integrity—reflect who we are and how we work together. Everyone’s ideas, big or small, have the potential to improve millions of lives. Innovation thrives when people from all backgrounds bring their unique perspectives to the table. Lonza is committed to creating an inclusive environment for all employees.

Reference: R74575

You will feel at home at Lonza if you:

• Take ownership, step forward, and enjoy meaningful responsibility
• Love solving problems and thrive in a complex, fast-moving environment
• Are curious, always looking to learn and improve
• Work collaboratively, contributing to something bigger than yourself
• Are motivated to make a difference through work that impacts customers and their patients

Why Lonza:

We are a place of unique opportunity, where your ideas, expertise and ambition can make a real difference. Here, will have the freedom to grow, the support to succeed and the chance to contribute to work that matters.

We are the makers of the medicines of tomorrow.