On-Site OT Security Architect — Multi-Site ICS

Bloom Energy; United States; On-site; USD 130,000 - 188,000; Full time

Job summary

Bloom Energy in Newark, Delaware is seeking an experienced OT Security Architect to lead security across production sites. You will deploy and tune OT security tooling, design IT/OT convergence, and coordinate with Network Engineering on segmentation and monitoring.

The role requires 8+ years in cybersecurity with 4+ years OT/ICS in manufacturing, hands-on deployment at multiple sites, and familiarity with Purdue model and ISA/IEC 62443.

Qualifications

• Bachelor’s degree or equivalent hands-on experience.
• 8+ years in cybersecurity/network/infrastructure engineering, incl. 4+ years OT/ICS in manufacturing.
• Hands-on deployment and operation of OT security tooling at multiple sites.
• Strategy-only or advisory backgrounds will not be considered.

Responsibilities

• Deploy, configure, and tune OT security platforms across manufacturing sites.
• Own operational health of deployed tooling (coverage, sensor health, upgrades).
• Design IT/OT convergence controls and network segmentation.
• Implement OT security controls per Purdue model and ISA/IEC 62443.
• Run OT asset discovery and integrate telemetry with SIEM/EDR/NDR.
• Lead POCs and production rollouts for new OT security technologies.

Skills

OT security

Industrial cybersecurity

Network security

Purdue model

ISA/IEC 62443

SIEM / XDR / EDR

Scripting (PowerShell)

Python

OT/ICS environments

PLC/SCADA

Education

Bachelor’s degree in Cybersecurity or related field

Tools

TXOne

Claroty

Nozomi Networks

Dragos

Cisco Cyber Vision

Job description

Bloom Energy in Newark, Delaware is seeking an experienced OT Security Architect to lead security across production sites. You will deploy and tune OT security tooling, design IT/OT convergence, and coordinate with Network Engineering on segmentation and monitoring.

The role requires 8+ years in cybersecurity with 4+ years OT/ICS in manufacturing, hands-on deployment at multiple sites, and familiarity with Purdue model and ISA/IEC 62443.