OT Security Architect — Industrial Cyber & Risk Guidance

EY; Charlotte (NC); Hybrid; USD 104,800 - 192,200; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation package

Total Rewards: medical/dental, pension

Job summary

EY is seeking an experienced Security Architect – Operational Technology (OT) to provide architecture guidance and technical oversight for industrial environments. This role supports site-level design reviews, network segmentation validation, secure connectivity planning, exception analysis, operational readiness, and risk-based decisions.

The architect collaborates with cybersecurity, infrastructure, engineering, operations, and site teams to ensure secure, supportable OT solutions.

Qualifications

• Bachelor's degree or related field preferred.
• 8–10+ years in cybersecurity, infra, networking, or security architecture roles.
• 5+ years supporting OT, manufacturing, or critical infrastructure environments.
• Strong understanding of network security, firewalls, segmentation, secure connectivity, and remote access.
• Experience reviewing designs against architecture standards and requirements.
• Strong communication, documentation, and risk-based decision-making skills.

Responsibilities

• Apply OT cybersecurity standards and approved design patterns to site-level implementations.
• Review OT network, firewall, secure access, monitoring designs for alignment with standards.
• Identify gaps between proposed implementations and architecture requirements.
• Provide remediation options for design constraints or operational concerns.
• Support architecture reviews for site implementations, modernization, and operational changes.
• Validate alignment with segmentation, zoning, firewall, remote access, monitoring, and ops expectations.
• Participate in design discussions for complex OT implementations.
• Partner with engineering and operations to transition approved designs into steady-state support.
• Support risk assessments and impact analysis for non-standard decisions.
• Provide input for exception reviews, risk acceptance discussions, and remediation planning.
• Escalate material design risks through governance channels.
• Ensure architecture decisions and risk outcomes are documented and defensible.
• Review secure connectivity patterns involving firewalls, remote access, and segmentation controls.
• Advise on Zero Trust alignment for OT users, devices, apps, and remote access cases.
• Assist with dependencies affecting implementation, ops, lifecycle, or supportability.
• Validate designs include monitoring, alerting, documentation, and escalation considerations.
• Support operational readiness discussions and post-implementation improvements.
• Provide senior technical advisory support for complex OT security architecture decisions.
• Develop reusable guidance and implementation patterns from site delivery experience.

Skills

Architecture

OT security architecture

Network segmentation

Secure remote access

Zero Trust principles

Firewall policy architecture

Industrial networking

Risk assessment

Documentation and handoff

Stakeholder coordination

Operational readiness

Infrastructure

Operations

Security monitoring concepts

Routing and switching

Education

Bachelor's degree in Cybersecurity, Information Technology, Engineering, Computer Science, or related field

Tools

Job description

EY is seeking an experienced Security Architect – Operational Technology (OT) to provide architecture guidance and technical oversight for industrial environments. This role supports site-level design reviews, network segmentation validation, secure connectivity planning, exception analysis, operational readiness, and risk-based decisions.

The architect collaborates with cybersecurity, infrastructure, engineering, operations, and site teams to ensure secure, supportable OT solutions.