OT Security Architect

futureproof; United States; Remote; USD 165,000 - 331,000; Part time

Benefits offered by this job

Remote contract role

Job summary

futureproof is seeking a Principal OT Security Architect (Lead) for a remote, contract engagement to lead enterprise OT cybersecurity standards and reference architectures for regulated manufacturing environments.

You will define OT security principles, network segmentation, secure integration patterns, and governance standards, collaborating with IT, OT, Engineering, Manufacturing, Quality, and Cybersecurity teams to drive secure outcomes.

Qualifications

• 12+ years of cybersecurity experience, with 7+ years in OT/ICS.
• Experience in regulated manufacturing environments.
• Expertise in IEC 62443 and NIST SP 800-82.
• Knowledge of Purdue Model, industrial DMZ, and network segmentation.
• Experience with OT incident response.

Responsibilities

• Lead stakeholder workshops across IT, OT, Engineering, Manufacturing, Quality, and Cybersecurity teams.
• Define OT cybersecurity strategy, architecture principles, and governance frameworks.
• Develop Security Zones and Conduits methodologies aligned with IEC 62443.
• Define Defence-in-Depth security architecture using the Onion Model.
• Establish OT network segmentation and firewall architecture standards.
• Define secure connectivity requirements between OT, enterprise IT, and cloud environments.
• Develop OT identity and access management requirements, including privileged access controls.
• Establish cybersecurity requirements for vulnerability management and incident response.
• Ensure alignment with industry regulations, corporate standards, and data protection requirements.
• Lead technical reviews, governance forums, and document sign-off activities.

Skills

OT security leadership

IEC 62443

NIST SP 800-82

ICS/OT security

Risk assessment

Incident response

IAM for OT

Firewall architecture

Network segmentation

Governance frameworks

Job description

This is a remote position. We are looking for a Principal OT Security Architect (Lead) to lead the development of enterprise Operational Technology cybersecurity standards, reference architectures, and security guidelines for regulated manufacturing environments. You will act as the primary consultant defining OT security principles, network segmentation requirements, secure integration patterns, and governance standards, working closely with IT, OT, Engineering, Manufacturing, Quality, and Cybersecurity teams.

Key responsibilities

• Lead stakeholder workshops across IT, OT, Engineering, Manufacturing, Quality, and Cybersecurity teams.
• Define OT cybersecurity strategy, architecture principles, and governance frameworks.
• Develop Security Zones and Conduits methodologies aligned with IEC 62443.
• Define Defence-in-Depth security architecture using the Onion Model.
• Establish OT network segmentation and firewall architecture standards.
• Define secure connectivity requirements between OT, enterprise IT, and cloud environments.
• Develop OT identity and access management requirements, including privileged access controls.
• Establish cybersecurity requirements for vulnerability management and incident response.
• Ensure alignment with industry regulations, corporate standards, and data protection requirements.
• Lead technical reviews, governance forums, and document sign-off activities.

Requirements

• 12+ years of cybersecurity experience , including 7+ years specifically in OT/ICS cybersecurity .
• Experience in regulated manufacturing environments .
• Strong knowledge and practical application of IEC 62443 and NIST SP 800-82 .
• Expertise in Industrial Control Systems and manufacturing cybersecurity.
• Experience conducting OT risk assessments and defining security governance.
• Strong understanding of the Purdue Model , industrial DMZ architectures , and network segmentation .
• Expertise in firewall security architecture.
• Knowledge of identity and access management for OT environments.
• Experience with OT incident response.
• Ability to lead cross-functional workshops and translate security requirements into enterprise standards and reference architectures.

Benefits

• Locations: New Jersey, USA or CEE region
• Contract Type: Freelance / Contract
• Start date: October, 2026
• Time Allocation: 40 hours/week