OT Cybersecurity Architect: Secure Industrial Control

Plexus; Neenah (WI); Hybrid; USD 129,500 - 194,300; Full time

Job summary

Plexus is seeking an OT Cybersecurity Architect to bridge IT security with OT/ICS environments. You will define secure architectures, standards, and risk-management frameworks across manufacturing sites to protect uptime and safety.

The role requires deep knowledge of industrial protocols and governance, plus experience with legacy systems and secure remote access. Hybrid work is offered, with up to 25–30% travel to sites.

Qualifications

• 8–10 years in cybersecurity with 4+ years OT/ICS architecture/engineering.
• Bachelor's degree in Electrical/Computer Engineering, CS, or related field.
• Experience in large-scale heavy industrial environments.
• Knowledge of Modbus, Profinet, EtherNet/IP, DNP3, OPC UA.
• ISA/IEC 62443, ISO 27001, NIST SP 800‑82, Purdue Model.

Responsibilities

• Define OT Security Architecture using Purdue Model and ISA/IEC 62443.
• Network Segmentation with iDMZs, firewalls, and micro-segmentation.
• Roadmap and selection of OT security tools for ICS/SCADA environments.
• Establish governance and standards for PLCs, SCADA, DCS, HMIs, and OT assets.
• Bridge IT/Security with Plant Engineering to translate risks for leadership.
• Lead Architecture Review Board for OT projects and security policies.
• Vendor management with major automation vendors for secure access.
• Lead threat modeling and risk assessments across sites for remediation.
• Coordinate incident response logging and playbooks with SOC.

Skills

OT/ICS security

Industrial protocols

Security standards

Zero-trust remote access

Threat modeling

Education

Bachelor's degree in Electrical/Computer Engineering or CS

Job description

Plexus is seeking an OT Cybersecurity Architect to bridge IT security with OT/ICS environments. You will define secure architectures, standards, and risk-management frameworks across manufacturing sites to protect uptime and safety.

The role requires deep knowledge of industrial protocols and governance, plus experience with legacy systems and secure remote access. Hybrid work is offered, with up to 25–30% travel to sites.