OT Cybersecurity Architect

Ellaway Blues Consulting; Nashville (TN); On-site; USD 130,000 - 190,000; Full time

Job summary

Ellaway Blues Consulting seeks an OT Cybersecurity Architect to shape and govern security for industrial control environments, balancing safety, reliability, and uptime.

You will design practical security solutions for SCADA, DCS, PLCs, RTUs, HMIs, and edge technologies and collaborate with engineering, operations, and vendor teams to harden OT networks.

The role requires strong ISA/IEC 62443, NIST CSF knowledge and hands-on architecture experience in critical infrastructure.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, engineering, information systems, or related field; equivalent experience will also be considered.
• 8+ years of experience in OT, IC, industrial cybersecurity, or critical-infrastructure environments.
• 3+ years of experience designing cybersecurity architecture for enterprise or industrial environments.
• Strong knowledge of SCADA, PLCs, HMIs, RTUs, industrial protocols, and secure industrial networking.
• Experience securing environments such as pipelines, terminals, refineries, manufacturing sites, utilities, or other critical infrastructure.
• Demonstrated experience with IT/OT segmentation, high-availability operational environments, and collaboration with engineering and industrial system vendors.
• Ability to balance cybersecurity objectives with operational safety, reliability, and continuity requirements.

Responsibilities

• Define and maintain OT cybersecurity architecture, standards, reference designs, and long-term roadmaps.
• Design secure solutions for SCADA, DCS, PLCs, RTUs, HMIs, historian platforms, engineering workstations, SIS, IIoT, and edge technologies.
• Establish secure IT/OT integration patterns, including network segmentation, industrial DMZs, firewalls, remote access, jump hosts, wireless networks, and vendor connectivity.
• Apply Zero Trust principles, identity controls, MFA, least-privilege access, and privileged-access standards within OT environments.
• Guide the use of OT security tools such as asset discovery, passive monitoring, IDS/NDR, vulnerability management, SIEM integration, and secure remote-access platforms.
• Lead architecture reviews for modernization initiatives, assess risk, and recommend compensating controls where operational constraints exist.
• Support incident response, forensic investigations, and post-incident improvement efforts involving industrial systems.
• Evaluate emerging technologies, lead proof-of-concept initiatives, and present recommendations to technical and executive stakeholders.
• Ensure alignment with relevant frameworks and requirements, including NIST CSF, ISA/IEC 62443, SOX, and CIS Controls.

Education

Bachelor’s degree in cybersecurity, computer science, engineering, information systems, or related field

Job description

We are seeking an OT Cybersecurity Architect to shape and govern the security strategy for industrial control environments. This role will design practical, resilient cybersecurity solutions that protect critical operations while preserving safety, reliability, and uptime.

You will partner with engineering, operations, infrastructure, network, cloud, security, and external technology teams to strengthen security across SCADA, IC

What You’ll Do

• Define and maintain OT cybersecurity architecture, standards, reference designs, and long-term roadmaps.
• Design secure solutions for SCADA, DCS, PLCs, RTUs, HMIs, historian platforms, engineering workstations, SIS, IIoT, and edge technologies.
• Establish secure IT/OT integration patterns, including network segmentation, industrial DMZs, firewalls, remote access, jump hosts, wireless networks, and vendor connectivity.
• Apply Zero Trust principles, identity controls, MFA, least-privilege access, and privileged-access standards within OT environments.
• Guide the use of OT security tools such as asset discovery, passive monitoring, IDS/NDR, vulnerability management, SIEM integration, and secure remote-access platforms.
• Lead architecture reviews for modernization initiatives, assess risk, and recommend compensating controls where operational constraints exist.
• Support incident response, forensic investigations, and post-incident improvement efforts involving industrial systems.
• Evaluate emerging technologies, lead proof-of-concept initiatives, and present recommendations to technical and executive stakeholders.
• Ensure alignment with relevant frameworks and requirements, including NIST CSF, ISA/IEC 62443, SOX, and CIS Controls.

What You’ll Bring

• Bachelor’s degree in cybersecurity, computer science, engineering, information systems, or a related field; equivalent experience will also be considered.
• 8+ years of experience in OT, IC, industrial cybersecurity, or critical-infrastructure environments.
• 3+ years of experience designing cybersecurity architecture for enterprise or industrial environments.
• Strong knowledge of SCADA, PLCs, HMIs, RTUs, industrial protocols, and secure industrial networking.
• Experience securing environments such as pipelines, terminals, refineries, manufacturing sites, utilities, or other critical infrastructure.
• Demonstrated experience with IT/OT segmentation, high-availability operational environments, and collaboration with engineering and industrial system vendors.
• Ability to balance cybersecurity objectives with operational safety, reliability, and continuity requirements.

Preferred Certifications

• ISA/IEC 62443, CISSP, CISM, Microsoft Cybersecurity Architect Expert, CCNP Security, or Fortinet certifications.