NERC CIP & OT Security Architect

Guidehouse; United States; Remote; USD 89,000 - 148,000; Full time

Benefits offered by this job

Medical Insurance

Dental & Vision Insurance

401(k) Retirement Plan

Parental Leave

Tuition Reimbursement

Mobility Stipend

Job summary

Guidehouse is seeking a highly skilled security architecture professional to design and implement secure, compliant architectures for enterprise environments within the Risk & Regulatory Compliance Consulting practice.

You will lead the development of data models, secure data flows across AWS/Azure/on-prem, and alignment with NERC CIP, NIST, ISO 27001, CIS controls; travel up to 25% and on-site collaboration across Guidehouse offices or client sites in the United States.

Qualifications

• Bachelor’s degree from an accredited university/college.
• Minimum of THREE (3) years post-graduation working experience within the electric utility industry or a NERC related regulator.
• Work experience for all levels must be an emphasis on North American NERC Reliability Standards (USA and/or Canada) supporting regulatory framework and processes around NERC Critical Infrastructure Protection (CIP) and Regional Entities.
• Experience in designing enterprise data models, data lakes, warehouses, and integration frameworks using structured and unstructured data.
• Deep understanding of NIST, ISO 27001, and CIS controls to architect secure systems and enforce security compliance.
• In-depth knowledge of implementing NERC CIP standards (002–013), audit preparation, evidence gathering, and mitigation planning.
• Proficient in securing data flows across AWS, Azure, and on-prem environments with encryption, IAM, and network segmentation.
• Designs and implements RBAC, ABAC, MFA, and privileged access management aligned with CIP-007 and CIP-005 requirements.
• Ability to design secure architectures that anticipate attack vectors, supported by playbooks and detection strategies.
• Familiar with securing OT environment such EMS, SCADA, DCS, and other industrial control systems within the Bulk Electric System.
• Ensures integrity, availability, and confidentiality of data through metadata standards, classification, retention, and purging policies.
• Strong writing skills for creating security architecture diagrams, CIP evidence packages, procedures, and training materials.
• Works effectively with compliance, operations, IT, and engineering teams to align technical architecture with regulatory and business needs.
• Ability to travel to include potential international as needed.
• Ability to work onsite in a Guidehouse Office or Client Office location.
• Currently reside in the contiguous United States.

Responsibilities

• Design enterprise data models, data lakes, warehouses, and integration frameworks for structured and unstructured data.
• Architect secure systems aligned with NIST, ISO 27001, and CIS controls to ensure compliance.
• Implement NERC CIP standards (002–013), including audit preparation, evidence gathering, and mitigation planning.
• Secure data flows across AWS, Azure, and on-prem environments using encryption, IAM, and network segmentation.
• Develop and enforce RBAC, ABAC, MFA, and privileged access management in compliance with technical CIP standards or similar regulations
• Create secure architectures that anticipate attack vectors, supported by playbooks and detection strategies.
• Protect OT environments such as EMS, SCADA, DCS, and other industrial control systems within the Bulk Electric System.
• Maintain data integrity, availability, and confidentiality through metadata standards, classification, retention, and purging policies.
• Collaborate with compliance, operations, IT, and engineering teams to align technical architecture with regulatory and business needs.

Skills

Regulatory compliance

NERC CIP

Data architecture

Cloud security

RBAC/ABAC/MFA

Stakeholder collaboration

Education

Bachelor’s degree

Tools

AWS

Azure

IAM

Encryption tools

Job description

Guidehouse is seeking a highly skilled security architecture professional to design and implement secure, compliant architectures for enterprise environments within the Risk & Regulatory Compliance Consulting practice.

You will lead the development of data models, secure data flows across AWS/Azure/on-prem, and alignment with NERC CIP, NIST, ISO 27001, CIS controls; travel up to 25% and on-site collaboration across Guidehouse offices or client sites in the United States.