OT Infrastructure Solution Architect

Cognizant; Montpelier (VT); On-site; USD 110,000 - 165,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays plus PTO

401(k) plan and contribution

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant invites applications for an OT Infrastructure Solution Architect in Montpelier, VT. The role requires 16+ years of experience and focuses on validating OT infrastructure architecture, collaborating with architectural and security teams, and guiding secure IT/OT integration aligned with Purdue Model principles.

You will review designs, manage migrations, and act as a design authority, ensuring scalable, secure infrastructure while meeting program timelines.

Qualifications

• Experience with Windows/Linux, DNS, DHCP, NTP, DFS.
• Knowledge of OT platforms and industrial networks.
• Understanding of security tooling and enterprise services.

Responsibilities

• Understand and validate the overall OT infrastructure architecture and technology stack.
• Collaborate with client technical architects, program stakeholders, site teams, security teams, and infrastructure SMEs to capture requirements.
• Assess current-state site environments and identify architecture dependencies, constraints, integration requirements, and migration considerations.
• Validate target-state OT infrastructure architecture across network, identity, access management, endpoint management, security tooling, and operational support components.
• Define, review, and validate network segmentation strategy aligned with Purdue Model principles.
• Provide architecture guidance for secure IT/OT integration with approved standards.
• Validate integration architecture for core infrastructure components (AD, PAM, PKI, endpoint protection, ePO, SCCM).
• Review engineering designs, high/low-level designs, implementation plans, and migration approaches for consistency.
• Act as technical design authority for architecture queries, decisions, and deviations.
• Identify risks, gaps, security concerns, dependencies, and blockers and drive resolution.
• Support governance forums, design reviews, and technical decision reviews with documented outcomes.
• Ensure deliverables are scalable, secure, and aligned with standards and timelines.

Skills

OS & core services

Storage & backup

OT Platforms

Industrial network & security

Tools

Active Directory

Privileged Access Management

Public Key Infrastructure

endpoint protection

ePO

SCCM

Job description

OT Infrastructure Solution Architect

Experience: 16+ years

Please note, this role is not able to offer visa transfer or sponsorship now or in the future

Required Skills:

• Operating Systems and Core Services (Windows/Linux, DNS, DHCP, NTP, DFS)
• Storage & backup
• OT Platforms
• Industrial Network & Security

Responsibilities:

Understand and validate the overall OT infrastructure architecture and associated technology stack

Collaborate with Client’s Technical Architects, program stakeholders, site teams, security teams, and infrastructure SMEs to capture business, technical, operational, compliance, and site-specific requirements

Assess current-state site environments and identify architecture dependencies, technical constraints, integration requirements, and migration considerations.

Validate target-state OT infrastructure architecture across network, identity, access management, endpoint management, security tooling, and operational support components.

Define, review, and validate network segmentation strategy aligned with Purdue Model principles, including separation of enterprise IT, site operations, industrial DMZ, supervisory control, and control system layers

Provide architecture guidance for secure IT/OT integration, ensuring that communication paths, access patterns, and infrastructure services are aligned with approved security and operational standards.

Validate integration architecture for core infrastructure components such as Active Directory, Privileged Access Management, Public Key Infrastructure, endpoint protection, ePO, SCCM, and related enterprise services.

Review engineering designs, build documents, high-level designs, low-level designs, implementation plans, and migration approaches to ensure consistency with the approved architecture.

Act as a technical design authority for architecture-related queries, design decisions, technical exceptions, and implementation deviations.

Identify architecture risks, design gaps, security concerns, operational dependencies, and implementation blockers, and work with stakeholders to drive timely resolution.

Support governance forums, design review meetings, architecture walkthroughs, and technical decision reviews with clear recommendations and documented outcomes.

Ensure that engineering and migration deliverables are scalable, secure, supportable, and aligned with enterprise architecture standards and program timelines

Applications will be accepted until 10/9/2026

The annual salary for this position is between $110,000- $165,000 depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and is subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

• Medical/Dental/Vision/Life Insurance
• Paid holidays plus Paid Time Off
• 401(k) plan and contribution
• Long-term/Short-term Disability
• Paid Parental Leave
• Employee Stock Purchase Plan

Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

#CB

#IND123

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.