Cyber Security Architect – OT/ICS

FNRCO; Riyadh; On-site; SAR 1,100,000 - 1,900,000; Full time

Job summary

FNRCO is seeking a seasoned OT Security Architect to design and oversee secure OT environments, including ICS/SCADA, PLCs, HMIs, and industrial networks.

You will define security standards aligned with IEC 62443 and NIST, assess OT risks, and collaborate with IT/OT teams to implement defense-in-depth controls.

The role requires deep experience in Purdue Model, OT segmentation, remote access for OT vendors, and creating roadmaps.

Qualifications

• Minimum 6 years of experience with Operational Technology (OT) environments, including industrial control systems (ICS), SCADA, PLCs, HMIs, engineering workstations, historians, and industrial networks.
• Understanding of OT network architecture, Purdue Model, industrial zones and conduits, and IT/OT segmentation.
• Experience designing secure remote access solutions for OT vendors, engineers, and support teams.
• Knowledge of OT security standards and frameworks, especially IEC 62443, NIST SP 800-82, and relevant critical infrastructure security practices.
• Ability to assess OT risks while considering safety, availability, production continuity, and operational constraints.
• Experience with OT asset discovery, visibility tools, network monitoring, and passive detection technologies.
• Familiarity with industrial protocols such as Modbus, DNP3, OPC, Profinet, EtherNet/IP, BACnet, or similar.
• Experience supporting OT vulnerability management, compensating controls, and risk-based remediation.
• Ability to design secure OT network segmentation, firewall rules, jump servers, DMZ architecture, and controlled data flows between IT and OT.
• Knowledge of secure backup, disaster recovery, patching constraints, and lifecycle management for OT systems.
• Experience working with plant operations, engineering teams, automation vendors, SOC, and cybersecurity teams.
• Ability to balance cybersecurity requirements with operational safety, uptime, and site-specific limitations.
• Experience supporting OT incident response planning, tabletop exercises, and security monitoring use cases.
• Understanding of physical security, safety systems, and their relationship with cybersecurity in industrial environments.
• Experience preparing OT security documentation, architecture diagrams, risk assessments, and remediation roadmaps

Skills

OT Security

Purdue Model

IEC 62443

ICS/SCADA

OT Risk Assessment

Job description

• Design and maintain enterprise security architecture aligned with business, technology, and compliance requirements.
• Define security standards, reference architectures, patterns, and guardrails for cloud, network, applications, identity, data, and infrastructure.
• Review solution designs and ensure security requirements are embedded from the early design stage.
• Conduct security architecture assessments for new systems, platforms, integrations, and transformation programs.
• Identify security risks, recommend controls, and support risk treatment plans.
• Work with infrastructure, cloud, application, network, IAM, SOC, GRC, and OT teams to ensure secure‑by‑design implementation.
• Translate business and technical requirements into practical security controls.
• Support implementation of Zero Trust, defense‑in‑depth, segmentation, least privilege, secure access, and secure monitoring models.
• Define security requirements for third‑party integrations, APIs, remote access, cloud workloads, and critical systems.
• Support security governance by reviewing exceptions, deviations, and architecture waivers.
• Provide technical guidance to project teams during design, build, testing, and deployment phases.
• Ensure solutions comply with internal policies, regulatory requirements, and relevant standards such as ISO 27001, NIST, CIS, IEC 62443, and other applicable frameworks.
• Collaborate with SOC and operations teams to ensure security logging, monitoring, detection, and response requirements are included in solution designs.
• Maintain security architecture documentation, diagrams, decision records, and control mappings.
• Stay updated on emerging threats, security technologies, and architecture best practices.

Required Experience & Skills - OT Domain

• Minimum 6 years of experience with Operational Technology (OT) environments, including industrial control systems (ICS), SCADA, PLCs, HMIs, engineering workstations, historians, and industrial networks.
• Understanding of OT network architecture, Purdue Model, industrial zones and conduits, and IT/OT segmentation.
• Experience designing secure remote access solutions for OT vendors, engineers, and support teams.
• Knowledge of OT security standards and frameworks, especially IEC 62443, NIST SP 800-82, and relevant critical infrastructure security practices.
• Ability to assess OT risks while considering safety, availability, production continuity, and operational constraints.
• Experience with OT asset discovery, visibility tools, network monitoring, and passive detection technologies.
• Familiarity with industrial protocols such as Modbus, DNP3, OPC, Profinet, EtherNet/IP, BACnet, or similar.
• Experience supporting OT vulnerability management, compensating controls, and risk-based remediation.
• Ability to design secure OT network segmentation, firewall rules, jump servers, DMZ architecture, and controlled data flows between IT and OT.
• Knowledge of secure backup, disaster recovery, patching constraints, and lifecycle management for OT systems.
• Experience working with plant operations, engineering teams, automation vendors, SOC, and cybersecurity teams.
• Ability to balance cybersecurity requirements with operational safety, uptime, and site-specific limitations.
• Experience supporting OT incident response planning, tabletop exercises, and security monitoring use cases.
• Understanding of physical security, safety systems, and their relationship with cybersecurity in industrial environments.
• Experience preparing OT security documentation, architecture diagrams, risk assessments, and remediation roadmaps