OT Cybersecurity Architect / Engineer - Track 2 (Tools, Architecture & Compliance)

Tata Consultancy Services; Cincinnati (OH); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Comprehensive Medical Coverage

Family Support

401K Plan

Certification & Training

Vacation & Holidays

Job summary

Tata Consultancy Services in the United States seeks an OT security specialist to deploy and operate Nozomi, Zscaler, and CyberArk tools across multiple sites. You will define malware scanning and wireless strategies, publish reference architectures, and support compliance programs including CMMC and NIS2.

The role requires coordination across global teams, strong documentation, and ability to drive remediation and changes through SNOW. Salary range reflects senior OT security experience.

Qualifications

• Hands-on experience deploying and operating Nozomi Guardian/CMC, Zscaler ZIA/ZPA, and CyberArk PAM/PSM in OT or IC environments.
• Experience with tool design, configuration, validation, stabilization, and handover to support across multiple sites.
• Experience defining OT malware scanning and OT wireless security strategies aligned with operational constraints.
• Experience developing OT reference architectures, target-state diagrams, control mappings, and adoption guidance.
• Working knowledge of CMMC, EASA Part-IS, NIS2, IEC 62443, and NIST SP 800-82.
• Experience conducting compliance gap assessments, preparing evidence packages, and tracking remediation actions.

Responsibilities

• Provide OT tools deployment support for Nozomi, Zscaler, and CyberArk across 15 partial OTN sites, including design, configuration, validation, and handover.
• Define the OT Malware Scanning Strategy and associated documentation aligned with policy and operational constraints.
• Define the OT Wireless Strategy and documentation covering RF planning, segmentation, and security controls.
• Publish the revised OT Reference Architecture Design, including target-state diagrams and control mappings for new sites.
• Provide CMMC, EASA Part-IS, and NIS2 compliance-readiness support, including gap assessments and remediation planning.
• Drive OT defect remediation actions from Internal Audit findings with root-cause analysis and closure evidence.
• Coordinate deployment and change activities through SNOW and provide stabilization and knowledge transfer.

Skills

OT security strategy

Compliance & governance

Industrial cybersecurity

Reference architecture

Documentation & policy

Stakeholder coordination

Technical leadership

Education

Bachelor of Computer Science

Tools

Nozomi Guardian/CMC

Zscaler ZIA/ZPA

CyberArk PAM/PSM

ServiceNow (SNOW)

RISK & compliance tooling

AWS/Azure administration

Windows/Linux administration

Job description

• Hands-on experience deploying and operating Nozomi Guardian/CMC, Zscaler ZIA/ZPA, and CyberArk PAM/PSM in OT or IC S environments.
• Experience with tool design, configuration, validation, stabilization, and handover to support across multiple sites.
• Experience defining OT malware scanning and OT wireless security strategies aligned with industrial operational constraints.
• Experience developing OT reference architectures, target-state diagrams, control mappings, and adoption guidance.
• Working knowledge of CMMC, EASA Part-IS, NIS2, IEC 62443, and NIST SP 800-82.
• Experience conducting compliance gap assessments, preparing evidence packages, and tracking remediation actions to closure.
• Good to have: Runzero, Maximo, ServiceNow, Algosec, Palo Alto, Check Point, Cisco Catalyst 9000, RF planning, OT segmentation, Windows/Linux administration, and AWS/Azure administration.
• Provide OT tools deployment support for Nozomi, Zscaler, and CyberArk across 15 partial OTN sites, including design, configuration, validation, and handover to support.
• Define the OT Malware Scanning Strategy and associated documentation aligned with cybersecurity policy and OT operational constraints.
• Define the OT Wireless Strategy and documentation covering RF planning, segmentation, and security controls.
• Publish the revised OT Reference Architecture Design, including target-state diagrams, control mappings, and adoption guidance for new sites.
• Provide CMMC, EASA Part-IS, and NIS2 compliance-readiness support, including gap assessments, evidence packages, and remediation planning.
• Drive OT defect remediation actions arising from Internal Audit findings, including root-cause analysis, corrective-action tracking, and closure evidence.
• Coordinate deployment and change activities through SNOW and provide stabilization, knowledge transfer, and handover to support.

Job Description

Must Have Technical/Functional Skills

• Hands-on experience deploying and operating Nozomi Guardian/CMC, Zscaler ZIA/ZPA, and CyberArk PAM/PSM in OT or IC S environments.
• Experience with tool design, configuration, validation, stabilization, and handover to support across multiple sites.
• Experience defining OT malware scanning and OT wireless security strategies aligned with industrial operational constraints.
• Experience developing OT reference architectures, target-state diagrams, control mappings, and adoption guidance.
• Working knowledge of CMMC, EASA Part-IS, NIS2, IEC 62443, and NIST SP 800-82.
• Experience conducting compliance gap assessments, preparing evidence packages, and tracking remediation actions to closure.
• Good to have: Runzero, Maximo, ServiceNow, Algosec, Palo Alto, Check Point, Cisco Catalyst 9000, RF planning, OT segmentation, Windows/Linux administration, and AWS/Azure administration.

Roles & Responsibilities

• Provide OT tools deployment support for Nozomi, Zscaler, and CyberArk across 15 partial OTN sites, including design, configuration, validation, and handover to support.
• Define the OT Malware Scanning Strategy and associated documentation aligned with cybersecurity policy and OT operational constraints.
• Define the OT Wireless Strategy and documentation covering RF planning, segmentation, and security controls.
• Publish the revised OT Reference Architecture Design, including target-state diagrams, control mappings, and adoption guidance for new sites.
• Provide CMMC, EASA Part-IS, and NIS2 compliance-readiness support, including gap assessments, evidence packages, and remediation planning.
• Drive OT defect remediation actions arising from Internal Audit findings, including root-cause analysis, corrective-action tracking, and closure evidence.
• Coordinate deployment and change activities through SNOW and provide stabilization, knowledge transfer, and handover to support.

Generic Managerial Skills, If any

Excellent communication, stakeholder coordination, documentation, and ability to work independently across global teams.

Salary Range: $130,000 - $160,000 a year

TCS Employee Benefits Summary

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Qualifications:

BACHELOR OF COMPUTER SCIENCE