External Job Posting Title Principal OT Cybersecurity / ICS Security Architect

Peraton; Northern (KY); Hybrid; USD 135,000 - 216,000; Full time

Job summary

Peraton Labs is hiring a Principal OT Cybersecurity Architect to bridge OT/ICS and enterprise IT security for a federal cybersecurity modernization program. You will lead requirements, survey the market, evaluate products, and deliver defensible recommendations to guide procurement decisions, with travel up to 25%.

Remote, U.S.-based, with lab engagements and occasional trips to the IC S Lab in New Jersey. You will collaborate with stakeholders across engineering, operations, and cybersecurity,

Qualifications

• U.S. citizenship and ability to obtain Public Trust and PIV access.
• Bachelor's degree in CS, CE, Cybersecurity, or related field with 12+ years in systems architecture or cyber engineering; or 16 years of experience without a degree.
• Experience across OT/ICS and enterprise IT security environments.
• Direct experience in electric-utility/power-grid domain.
• Hands-on experience applying NERC CIP standards in a utility environment.
• Proven lead of RFI and vendor-evaluation lifecycle.

Responsibilities

• Lead end-to-end requirements and solutions-analysis across multiple workstreams.
• Perform market surveys, evaluate candidate products, and document defensible recommendations.
• Draft RFIs, manage vendor responses, and coordinate lab evaluations.
• Design lab test environments and oversee product demonstrations.
• Prepare ASA documents and brief executive steering committees.
• Coordinate multi-stakeholder workshops for consensus on requirements.

Skills

OT/ICS security

Systems architecture

Executive briefing

Technical writing

Travel up to 25%

Education

Bachelor's degree in a technical discipline

Equivalent 16 years experience

Tools

NERC CIP standards

PIV credential process

Job description

Responsibilities

ABOUT THE ROLE

Peraton Labs is hiring a Principal OT Cybersecurity / IC S Security Architect — a senior systems architect role bridging operational technology (OT), industrial control systems (ICS), and enterprise IT cybersecurity — to join our Strategic Innovation Group in support of a federal customer's cybersecurity and OT modernization program for critical infrastructure.

As a Principal OT Cybersecurity / IC S Security Architect on our team, you will lead the requirements and solutions-analysis effort for one or more parallel workstreams of the customer's modernization program, spanning core capability areas such as access control, security monitoring, and asset and vulnerability management. You will work with the customer's engineering, operations, cybersecurity, and test-and-evaluation stakeholders, alongside a Peraton Labs delivery team of engineers and technical writers. The goal is to define requirements, survey the market, evaluate candidate products, and deliver defensible recommendations that guide the customer's procurement decisions.

WHAT YOU WILL DO

• Lead end-to-end solutions analysis for one or more workstreams: elicit and validate requirements, produce System Requirements Specifications (SRS) with traceability to NERC CIP, FISMA, and CISA Zero Trust Architecture.
• Conduct market research to identify candidate commercial products across identity and access controls, network monitoring and threat visibility, and inventory / configuration / vulnerability management.
• Draft Requests for Information (RFIs), manage vendor response windows, and lead technical engagement with bidders under federal market-research guardrails.
• Assess vendor responses and product capabilities against requirements; author comparison reports and down-select recommendations.
• Design lab test environments, author test plans, and oversee hands-on product demonstrations and evaluation at customer and Peraton Labs facilities.
• Author Alternative Solutions Analysis (ASA) documents and brief steering committees and executive decision-makers.
• Facilitate multi-stakeholder workshops across operational technology (SCADA, RTUs, protective relays, industrial protocols) and enterprise IT cybersecurity domains to build consensus on requirements and product selection.

Qualifications

REQUIRED QUALIFICATIONS

• U.S. Citizenship and the ability to obtain and maintain a Public Trust determination and PIV credential for unescorted access to the customer facility.
• Bachelor's degree in Computer Science, Computer or Electrical Engineering, Cybersecurity, or a related technical discipline, and 12+ years of progressive systems architecture or cyber engineering experience; in lieu of a degree, 16 years of relevant experience will be considered.
• Demonstrated systems-architecture experience across both operational technology (OT / IC S) and enterprise information technology (IT) security environments.
• Direct experience in the electric-utility or power-grid domain (utility, ISO / RTO, generation / transmission / distribution operator, DOE laboratory, or comparable critical-infrastructure operator).
• Hands-on experience applying NERC CIP standards (CIP-002 through CIP-014) in a utility environment.
• Proven record leading the full RFI and vendor-evaluation lifecycle: requirements, market survey, RFI authorship, response evaluation, lab validation, and recommendation.
• Strong technical writing and executive-briefing skills.
• Ability to travel domestically up to 25%, including routine trips to the Pacific Northwest.

DESIRED QUALIFICATIONS

• Working familiarity with FISMA controls and CISA Zero Trust Architecture mappings.
• Depth in one or more component domains: identity and access management; network detection and monitoring; packet capture and data diodes; cyber-asset and configuration management; or vulnerability and patch management for embedded devices.
• Experience authoring alternatives analyses under a formal systems-lifecycle methodology (utility SLC, DoDAF, NIST RMF, or comparable).
• Industry certifications such as GICSP, CISSP, GRID, CISA, or NERC-CIP-focused credentials.
• Experience presenting to federal or utility executive steering committees.
• Comfort operating under federal market-research guardrails (open information exchange with vendors; no NDAs; no procurement commitments).
• Experience with privileged access management (PAM) solutions.
• Experience with log and traffic monitoring systems supporting power protection, SCADA, and telecommunications environments.
• Experience with configuration management systems for power protection, SCADA, and telecommunications environments.

WORKING CONDITIONS

• Location / posture: Remote (U.S.-based); fully remote day-to-day.
• Travel: Up to 25% domestic; routine trips to the Pacific Northwest; periodic trips to the Peraton Labs IC S Lab in New Jersey.
• Schedule: Standard business hours, with occasional evening or weekend work during lab test windows or scheduled vendor demonstrations.
• Customer interaction: Frequent — requirements workshops, vendor engagements, steering-committee briefings. Requires professionalism, strong communication, and resilience in multi-stakeholder consensus-building.
• Onboarding: Background check, PIV credential, and customer-required training must be completed prior to unescorted facility access.

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Target Salary Range

$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.