IT/OT Architect

London Strategy; Polska; Remote; PLN 240,000 - 420,000; Full time

Job summary

London Strategy is seeking an experienced IT/OT Architect to design and operationalise security across converged IT and OT environments in Poland. You will own architecture, onboarding of assets into vulnerability management and security monitoring platforms, and ensure asset visibility, risk-based remediation, and effective threat detection across industrial and enterprise estates.

The role requires deep hands-on experience in IT/OT security, vulnerability programmes, OT visibility tools, and

Qualifications

• 7+ years in IT/OT security architecture or engineering.
• Strong grounding in network security (routing, switching, firewalls, VPNs, segmentation).
• Experience delivering vulnerability management programmes (Tenable, Qualys, Rapid7).
• Experience onboarding assets/log sources into SIEM/SOC platforms (Splunk, Sentinel, QRadar).
• Hands-on with OT visibility and threat detection tools (Claroty/Nozomi/Dragos/Armis).
• Knowledge of OT/ICS/SCADA environments and industrial protocols (Modbus, DNP3, OPC-UA).
• Familiar with IEC 62443, NIST 800-82, Purdue Model; certifications are a plus.

Responsibilities

• Design and maintain secure IT/OT architectures aligned to Purdue Model and IEC 62443.
• Lead vulnerability management programmes across IT/OT with risk-based prioritisation and remediation tracking.
• Define OT-safe vulnerability assessment approaches and compensating controls for PLCs and legacy systems.
• Onboard IT/OT assets/log sources into SIEM/SOC and OT monitoring platforms (Splunk, Sentinel, QRadar).
• Define log source standards, data collection, parsing/normalisation, and detection coverage for IT/OT.
• Collaborate with SOC to develop OT-aware detection use cases, alert tuning, and playbooks.
• Establish KPIs and reporting for remediation, asset coverage, and onboarding progress.
• Coordinate with plant teams to deploy scanners and sensors without disrupting operations.
• Ensure alignment with IEC 62443, NIST CSF, NIS2, ISO 27001; produce architecture docs and runbooks.

Skills

Network security

Vulnerability management

SIEM onboarding

OT security

Industrial protocols

IEC 62443

NIST standards

Threat detection

Stakeholder mgmt

English comms

Tools

Tenable

Splunk

Claroty

Nozomi

Dragos

QRadar

Microsoft Defender for IoT

ServiceNow

Job description

We are seeking an experienced IT/OT Architect with hands‑on expertise in vulnerability management and security monitoring onboarding to design, implement, and operationalise security across converged IT and Operational Technology (OT) environments. This role will own the architecture and onboarding of IT and OT assets into vulnerability management and security monitoring platforms (SIEM/SOC and OT network monitoring), ensuring full asset visibility, risk-based remediation, and effective threat detection across industrial and enterprise estates.

Key Responsibilities

• Design and maintain secure IT/OT architectures, including network segmentation, zones and conduits, and IT/OT DMZs aligned to the Purdue Model and IEC 62443
• Lead the design and rollout of vulnerability management programmes across IT and OT, covering asset discovery, passive and OT-safe active scanning, risk-based prioritisation, and remediation tracking
• Define OT-safe vulnerability assessment approaches and compensating controls where patching of PLCs, DCS, HMIs, and legacy systems is not feasible
• Plan and execute the onboarding of IT and OT assets, log sources, and network sensors into SIEM/SOC and OT monitoring platforms (e.g. Splunk, Microsoft Sentinel, QRadar, Claroty, Nozomi, Dragos)
• Define log source standards, data collection architecture, parsing/normalisation requirements, and detection use‑case coverage for IT and OT environments
• Work with SOC teams to develop OT‑aware detection use cases, alert tuning, escalation paths, and response playbooks
• Establish KPIs and reporting for vulnerability remediation, asset coverage, and monitoring onboarding progress
• Collaborate with plant/site engineering, infrastructure, and network teams to deploy scanners, sensors, and collectors without disrupting operations
• Ensure alignment with regulatory and compliance frameworks (IEC 62443, NIST CSF, NIST 800‑82, NIS2, ISO 27001)
• Produce architecture documentation, onboarding runbooks, and technical roadmaps, and present progress to technical and senior stakeholders

Required Skills & Experience

• 7+ years in IT/OT security architecture or engineering, with strong grounding in network security (routing, switching, firewalls, VPNs, network segmentation)
• Proven hands‑on experience delivering vulnerability management programmes using tools such as Tenable (incl. Tenable OT), Qualys, or Rapid7, including risk‑based prioritisation and remediation governance
• Proven experience onboarding assets and log sources into security monitoring platforms (SIEM/SOC) such as Splunk, Microsoft Sentinel, QRadar, or similar
• Hands‑on experience with OT visibility and threat detection tools such as Claroty, Nozomi Networks, Dragos, Armis, or Microsoft Defender for IoT
• Solid understanding of OT/ICS/SCADA environments, industrial protocols (Modbus, DNP3, OPC‑UA, Profinet), and the operational constraints of production environments
• Deep understanding of IEC 62443, NIST 800‑82, and Purdue Model architecture
• Relevant certifications preferred: CISSP, GICSP, GRID, CCNP Security, or vendor certifications (Tenable, Splunk, Claroty/Nozomi)
• Strong stakeholder management skills — able to communicate with both engineering/plant teams and security leadership
• Excellent English communication skills, written and verbal

Nice to Have

• Experience in manufacturing, pharmaceutical, energy/utilities, or critical infrastructure environments
• Experience building or maturing SOC processes, including IT/OT SOC integration
• Familiarity with EDR platforms (e.g. CrowdStrike, Microsoft Defender) and CMDB/asset inventory integration (e.g. ServiceNow)
• Prior consulting or client‑facing project experience

Location: Poland

Job type: Full-time or Contractor /Remote with occasional travel to client sites

About London Strategy

We are a management and IT consulting firm based in London with vast experience in M&A, IT, and transformation services. Our team transforms complexity into priority actions, a clear timeline, and executive decisions supported by appropriate governance. You will be able to work with senior advisors with Big 4 and top‑tier advisory firm backgrounds. Our success comes from a shared belief in rolling up our sleeves, working hard to solve complex challenges, executing plans, and implementing technology to help transform organizations. As we continue to grow and deepen our impact on organizations worldwide, we seek the right people to join us on our mission.