OT Security Architect | Industrial Cyber & Zero Trust

EY; Raleigh (NC); On-site; USD 104,800 - 192,200; Full time

Benefits offered by this job

Hybrid work model

Total rewards package (medical, dental

Generous time off

Job summary

EY is seeking an experienced Security Architect – Operational Technology (OT) to provide architecture guidance and technical oversight for industrial environments. The role focuses on site-level design reviews, network segmentation validation, secure connectivity planning, exception analysis, operational readiness, and risk-based decision-making.

The architect collaborates with cybersecurity, infrastructure, engineering, and site teams to ensure secure, supportable OT solutions.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Engineering, Computer Science, or related field preferred.
• 8–10+ years in cybersecurity, infra, networking, or security architecture.
• 5+ years supporting OT, manufacturing, industrial, engineering, or critical infrastructure environments.
• Strong knowledge of network security, firewalls, segmentation, secure connectivity, remote access, and infrastructure support concepts.
• Experience reviewing technical designs against established architecture standards and operational requirements.
• Strong communication, documentation, stakeholder management, and risk-based decision-making skills.

Responsibilities

• Apply established OT cybersecurity standards to site-level implementations.
• Review proposed OT network, firewall, secure access, monitoring, and infrastructure designs for alignment with approved standards.
• Identify gaps between proposed implementations and established architecture requirements.
• Recommend practical remediation options for design constraints, exceptions, or operational support concerns.
• Support architecture reviews for site implementations, modernization activities, and operational changes.
• Validate alignment with segmentation, zoning, firewall, remote access, monitoring, and operational support expectations.
• Participate in design discussions for complex, high-risk, or non-standard OT implementations.
• Partner with engineering and operations teams to support transition of approved designs into steady-state support.
• Support technical risk assessments and impact analysis for non-standard architecture decisions.
• Provide technical input for exception reviews, risk acceptance discussions, and remediation planning.
• Escalate material design risks, control gaps, or operational concerns through governance channels.
• Ensure architecture decisions and risk outcomes are documented and supportable.
• Review secure connectivity patterns involving firewalls, remote access, segmentation controls, monitoring platforms.
• Advise on Zero Trust implications for OT users, devices, apps, and remote access use cases.
• Develop reusable guidance, lessons learned, and implementation patterns from site delivery.

Skills

Architecture

Infrastructure

Operations

OT security architecture

Network segmentation

Operational readiness

Firewall policy

Secure remote access

Risk assessment

Zero Trust

Industrial networking

Documentation

Stakeholder coordination

Education

Bachelor's degree in Cybersecurity, Information Technology, Engineering, Computer Science, or related field preferred.

Job description

EY is seeking an experienced Security Architect – Operational Technology (OT) to provide architecture guidance and technical oversight for industrial environments. The role focuses on site-level design reviews, network segmentation validation, secure connectivity planning, exception analysis, operational readiness, and risk-based decision-making.

The architect collaborates with cybersecurity, infrastructure, engineering, and site teams to ensure secure, supportable OT solutions.