OT Cybersecurity Architect

Ellaway Blues Consulting; United States; On-site; USD 140,000 - 200,000; Full time

Job summary

Ellaway Blues Consulting seeks an OT Cybersecurity Architect to shape and govern the security strategy for industrial control environments, designing practical, resilient cybersecurity solutions that protect critical operations while preserving safety, reliability, and uptime.

You’ll partner with engineering, operations, infrastructure, network, cloud, security, and external teams to strengthen security across SCADA, DCS, PLCs, RTUs, HMIs, historian platforms, and edge technologies, and to drive

Qualifications

• 8+ years of experience in OT, industrial cybersecurity, or critical-infrastructure environments.
• Equivalent experience may be considered for the degree requirement.

Responsibilities

• Define and maintain OT cybersecurity architecture, standards, reference designs, and long-term roadmaps.
• Design secure solutions for OT environments and edge technologies.
• Establish secure IT/OT integration patterns, including network segmentation, industrial DMZs, firewalls, remote access, jump hosts, wireless networks, and vendor connectivity.
• Apply Zero Trust principles, identity controls, MFA, least-privilege access, and privileged-access standards within OT environments.
• Guide the use of OT security tools such as asset discovery, passive monitoring, IDS/NDR, vulnerability management, SIEM integration, and secure remote-access platforms.
• Lead architecture reviews for modernization initiatives, assess risk, and recommend compensating controls where operational constraints exist.
• Support incident response, forensic investigations, and post-incident improvement efforts involving industrial systems.
• Evaluate emerging technologies, lead proof-of-concept initiatives, and present recommendations to technical and executive stakeholders.
• Ensure alignment with relevant frameworks and requirements, including NIST CSF, ISA/IEC 62443, SOX, and CIS Controls.

Skills

OT cybersecurity experience

Industrial control systems security

Security architecture design

Cross-team collaboration

Education

Bachelor’s degree or equivalent in cybersecurity, computer science, engineering, information systems

Tools

Asset discovery

Passive monitoring

IDS/NDR

Vulnerability management

SIEM integration

Secure remote-access platforms

Job description

We are seeking an OT Cybersecurity Architect to shape and govern the security strategy for industrial control environments. This role will design practical, resilient cybersecurity solutions that protect critical operations while preserving safety, reliability, and uptime.

You will partner with engineering, operations, infrastructure, network, cloud, security, and external technology teams to strengthen security across SCADA, IC…
SCADA, DCS, PLCs, RTUs, HMIs, historian platforms, engineering workstations, SIS, IIoT, and edge technologies.

What You’ll Do

• Define and maintain OT cybersecurity architecture, standards, reference designs, and long-term roadmaps.
• Design secure solutions for SCADA, DCS, PLCs, RTUs, HMIs, historian platforms, engineering workstations, SIS, IIoT, and edge technologies.
• Establish secure IT/OT integration patterns, including network segmentation, industrial DMZs, firewalls, remote access, jump hosts, wireless networks, and vendor connectivity.
• Apply Zero Trust principles, identity controls, MFA, least-privilege access, and privileged-access standards within OT environments.
• Guide the use of OT security tools such as asset discovery, passive monitoring, IDS/NDR, vulnerability management, SIEM integration, and secure remote-access platforms.
• Lead architecture reviews for modernization initiatives, assess risk, and recommend compensating controls where operational constraints exist.
• Support incident response, forensic investigations, and post-incident improvement efforts involving industrial systems.
• Evaluate emerging technologies, lead proof-of-concept initiatives, and present recommendations to technical and executive stakeholders.
• Ensure alignment with relevant frameworks and requirements, including NIST CSF, ISA/IEC 62443, SOX, and CIS Controls.

What You’ll Bring

• Bachelor’s degree in cybersecurity, computer science, engineering, information systems, or a related field; equivalent experience will also be considered.
• 8+ years of experience in OT, IC…
  OT, industrial cybersecurity, or critical-infrastructure environments.
• 3+ years of experience designing cybersecurity architecture for enterprise or industrial environments.
• Strong knowledge of SCADA, PLCs, HMIs, RTUs, industrial protocols, and secure industrial networking.
• Experience securing environments such as pipelines, terminals, refineries, manufacturing sites, utilities, or other critical infrastructure.
• Demonstrated experience with IT/OT segmentation, high-availability operational environments, and collaboration with engineering and industrial system vendors.
• Ability to balance cybersecurity objectives with operational safety, reliability, and continuity requirements.

Preferred Certifications

• ISA/IEC 62443, CISSP, CISM, Microsoft Cybersecurity Architect Expert, CCNP Security, or Fortinet certifications.