OT Cybersecurity Architect

Veridian Tech Solutions, Inc.; Cincinnati (OH); On-site; USD 120,000 - 180,000; Full time

Job summary

Veridian Tech Solutions, Inc. is seeking an OT security engineer to deploy and operate Nozomi Guardian, Zscaler ZIA/ZPA, and CyberArk PAM/PSM across OT environments.

You will define malware scanning and wireless security strategies, develop OT reference architectures, and support multi-site deployments. Responsibilities include design, validation, and handover to support, with emphasis on compliance readiness (CMMC/NIS2/IEC 62443) and remediation tracking.

Qualifications

• Hands-on experience deploying and operating Nozomi Guardian/CMC, Zscaler ZIA/ZPA, and CyberArk PAM/PSM in OT or IC environments.
• Experience with tool design, configuration, validation, stabilization, and handover to support across multiple sites.
• Experience defining OT malware scanning and OT wireless security strategies aligned with industrial operational constraints.
• Experience developing OT reference architectures, target-state diagrams, control mappings, and adoption guidance.
• Good working knowledge of compliance frameworks such as CMMC, EASA Part-IS, NIS2, IEC 62443, and NIST SP 800-82.
• Experience conducting compliance gap assessments, preparing evidence packages, and tracking remediation actions to closure.

Responsibilities

• Provide OT tools deployment support for Nozomi, Zscaler, and CyberArk across 15 partial OTN sites, including design, configuration, validation, and handover to support.
• Define the OT Malware Scanning Strategy and associated documentation aligned with cybersecurity policy and OT operational constraints.
• Define the OT Wireless Strategy and documentation covering RF planning, segmentation, and security controls.
• Publish the revised OT Reference Architecture Design, including target-state diagrams, control mappings, and adoption guidance for new sites.
• Provide CMMC, EASA Part-IS, and NIS2 compliance-readiness support, including gap assessments, evidence packages, and remediation planning.
• Drive OT defect remediation actions arising from Internal Audit findings, including root-cause analysis, corrective-action tracking, and closure evidence.
• Coordinate deployment and change activities through SNOW and provide stabilization, knowledge transfer, and handover to support.

Skills

Nozomi Guardian

Zscaler ZIA/ZPA

CyberArk PAM/PSM

OT malware scanning

OT wireless security

OT reference architectures

CMMC

NIS2

IEC 62443

NIST SP 800-82

ServiceNow

RF planning

AWS/Azure administration

Windows/Linux administration

Palo Alto / Check Point

Tools

Runzero

Maximo

ServiceNow

Algosec

Palo Alto

Check Point

Cisco Catalyst 9000

RF planning

Windows administration

Linux administration

AWS administration

Azure administration

Nozomi Guardian

Job description

• Hands-on experience deploying and operating Nozomi Guardian/CMC, Zscaler ZIA/ZPA, and CyberArk PAM/PSM in OT or IC environments.
• Experience with tool design, configuration, validation, stabilization, and handover to support across multiple sites.
• Experience defining OT malware scanning and OT wireless security strategies aligned with industrial operational constraints.
• Experience developing OT reference architectures, target-state diagrams, control mappings, and adoption guidance.
• Working knowledge of CMMC, EASA Part-IS, NIS2, IEC 62443, and NIST SP 800-82.
• Experience conducting compliance gap assessments, preparing evidence packages, and tracking remediation actions to closure.
• Good to have: Runzero, Maximo, ServiceNow, Algosec, Palo Alto, Check Point, Cisco Catalyst 9000, RF planning, OT segmentation, Windows/Linux administration, and AWS/Azure administration.
• Provide OT tools deployment support for Nozomi, Zscaler, and CyberArk across 15 partial OTN sites, including design, configuration, validation, and handover to support.
• Define the OT Malware Scanning Strategy and associated documentation aligned with cybersecurity policy and OT operational constraints.
• Define the OT Wireless Strategy and documentation covering RF planning, segmentation, and security controls.
• Publish the revised OT Reference Architecture Design, including target-state diagrams, control mappings, and adoption guidance for new sites.
• Provide CMMC, EASA Part-IS, and NIS2 compliance-readiness support, including gap assessments, evidence packages, and remediation planning.
• Drive OT defect remediation actions arising from Internal Audit findings, including root-cause analysis, corrective-action tracking, and closure evidence.
• Coordinate deployment and change activities through SNOW and provide stabilization, knowledge transfer, and handover to support.