Principal Consultant – OT Security

Paramount Computer System; Tamil Nadu; On-site; INR 8,571,000 - 14,286,000; Full time

Job summary

Paramount Computer System is seeking a Principal Consultant – OT Security to lead advisory, design and deployment of OT/ICS security across EPC projects. You will work with clients to implement IEC 62443, NIST, MITRE ATT&CK for ICS, and Purdue-based segmentation to protect critical assets.

The role covers risk assessments, architecture, deployment of OT security solutions, and ongoing support through FAT/SAT, commissioning and handover, with multi-vendor coordination.

Qualifications

• Strong knowledge of OT standards: IEC 62443, NIST CSF, OTCC, NIST SP 800-82, MITRE ATT&CK for ICS
• OT architectures: Purdue Model, segmentation, DMZ design
• Industrial protocols: Modbus, DNP3, IEC 61850, OPC-UA, Profinet
• Hands-on experience with OT monitoring solutions and SIEM platforms

Responsibilities

• Risk, compliance & advisory across IEC 62443, OTCC and other standards
• Design secure OT networks based on Purdue model and segmentation
• Develop HLDs/LLDs and BoMs for OT security deployments
• Lead deployment of OT cybersecurity solutions including firewalls, IDS/IPS, PAM, SIEM integrations
• Support full project lifecycle including FAT/SAT, commissioning and handover
• Provide incident response support and threat monitoring for OT assets

Skills

OT security risk assessments

OT/ICS/OT security

Purdue model

Industrial protocols

Firewalls (NGFW, industrial)

SIEM (Splunk)

IDS/IPS

OT monitoring

Backup & recovery

NMS

Remote connectivity security

Tools

Splunk

Veritas

Acronis

NMS

Job description

Job Title: Principal Consultant – OT Security

Location: UAE, India

Experience: 10–15+ Years

Role Overview

We are seeking an experienced Senior Consultant – OT Security to lead and deliver cybersecurity initiatives across Industrial Control Systems (ICS), SCADA, and Operational Technology (OT) environments. The role involves advisory, design, implementation, and lifecycle support of OT security solutions aligned with global standards such as IEC 62443, OTCC, NIST SP 800-82, and MITRE ATT&CK for IC S.

You will work closely with clients, EPC teams, vendors, and internal stakeholders to secure critical infrastructure and enable safe digital transformation.

Key Responsibilities

• Risk, Compliance & Advisory
• Perform OT security risk assessments, gap analysis, and compliance reviews based on IEC 62443, OTCC and other standards
• Conduct security maturity assessments and recommend improvement roadmaps
• Provide advisory services for SCADA/ICS/OT environments across small to large-scale projects
• Assist clients in establishing or enhancing Cybersecurity Management Systems (CSMS)

2. Security Architecture & Design

• Design and implement secure OT network architectures based on Purdue Model and segmentation strategies
• Develop High-Level Designs (HLDs), Low-Level Designs (LLDs), and Bill of Materials (BoMs
• Review engineering documents, system architectures, and network diagrams from a security perspective
• Define and maintain security baseline configurations aligned with organizational policies
• Lead deployment of OT cybersecurity solutions including:
  • Firewalls (IT/OT & industrial firewalls)
  • IDS/IPS
  • Secure remote access solutions
  • Endpoint Protection Platforms (EPP)
  • Privileged Access Management (PAM)
  • SIEM integrations
• Implement and validate solutions in EPC project environments
• Support full project lifecycle: engineering, procurement, FAT, SAT, commissioning, and handover
• Support continuous threat detection and monitoring for OT assets
• Assist in incident response, investigation, and mitigation activities
• Integrate OT environments with centralized monitoring and SIEM platforms
• Support RFP/RFI/RFQ responses, technical proposals, and solution positioning
• Lead technical discussions with clients and stakeholders
• Provide expertise during solution demonstrations and workshops
• Develop and implement OT security policies, standards, and procedures
• Ensure alignment with regulatory frameworks and industry best practices
• Support clients in secure digital transformation and Industry 4.0 initiatives

Required Skills & Expertise

Technical Expertise

• Strong knowledge of:
  • OT standards: IEC 62443, NIST CSF, OTCC, NIST SP 800-82, MITRE ATT&CK for IC S
  • OT architectures: Purdue Model, segmentation, DMZ design
  • Industrial protocols: Modbus, DNP3, IEC 61850, OPC-UA, Profinet
• Hands-on experience or strong technical knowledge with:
  • Firewalls (NGFW & industrial)
  • SIEM platforms (e.g., Splunk)
  • IDS/IPS and OT monitoring solutions
  • Backup & recovery (Veritas, Acronis)
  • Domain controllers for DCS environments
  • AV/WSUS/AWL solutions
• Industrial networking components: switches, routers, FO infrastructure, NTP
• Operating systems patching and firmware management
• Network Management Systems (NMS)
• Secure remote connectivity solutions

Platform Experience

• Familiarity with major OT OEMs such as:
  • ABB, Siemens, Schneider, Honeywell, Emerson, Yokogawa
  • Rockwell/Allen Bradley, GE, Aspentech
  • OT security solutions (e.g., OWL, industrial firewalls)

Project & Operational Experience

• 5–7+ years of experience in deploying solutions in live OT/IT environments
• Strong experience in:
  • FAT, SAT, commissioning, and acceptance processes
  • Working in critical infrastructure environments
  • Multi-vendor and EPC project coordination

Preferred Certifications

• IEC 62443 Expert or similar certifications like ISA/IEC 62443 Risk Assessment Specialist)
• CISSP / CISM/ CEH
• Global Industrial Cyber Security Professional (GICSP)

Other relevant OT or cybersecurity certifications