Security Architect

CandidTalent; Foxborough (MA); On-site; USD 155,000 - 175,000; Full time

Benefits offered by this job

Employee ownership

Unlimited vacation

Parental leave

Health insurance

Dental insurance

Vision insurance

Certification reimbursement

Job summary

CandidTalent is building an OT cybersecurity practice for pharma, energy, and industrial manufacturers, with live plant work. You will lead the design authority for plant networks, OT DMZs, secure vendor access, and DeltaV integration, while also running discovery workshops with customers.

We value industrial exposure across plants, refineries, utilities or regulated sites, and prefer 10+ years in IT infrastructure with 5+ years in architecture and segmentation.

Qualifications

• 10+ years in infrastructure and networking.
• 5+ years in architecture with segmentation delivered.
• 62443 applied on real designs.
• Industrial exposure from plants, refineries, utilities or regulated sites.

Responsibilities

• Act as design authority for segmented plant networks and OT DMZs.
• Lead discovery workshops with customers and shape the solution.
• Explain design to funding stakeholders with engineering team support.

Skills

Industrial OT exposure

Network architecture

DeltaV experience

GICSP

CISSP (welcome)

Tools

DeltaV

Virtualization

OT security standards

Job description

$155,000 to $175,000 plus around 15% bonus

An employee owned engineering services business is standing up an OT cybersecurity practice, and this is the person who leads it. Their customers are pharma, energy and industrial manufacturers, and the work sits on live plants.

You would be the design authority, meaning segmented plant networks, industrial DMZs, secure remote access for vendors, virtualization standards for OT workloads, and the DeltaV integration layer. The other half of the job,is in front of the customer running the discovery workshop, shaping the solution, and explaining the design to the people who fund it, with a broad and experienced engineering team behind you to support.

This is not an enterprise IT security role. You need industrial exposure, from plants, refineries, utilities or regulated manufacturing sites, and it counts whether you got it on the plant side, at a vendor or at an integrator.

Beyond that around ten years in infrastructure and networking with five in architecture, segmentation you have delivered rather than documented, 62443 applied on real designs, and virtualization at design level. DeltaV, GICSP and CISSP are welcome.

Because the company is employee owned, you get a stake in what you build. Alongside that unlimited vacation, ten paid holidays, twelve paid weeks birthing parent leave, full medical, dental and vision, and certifications paid for.

It suits someone who wants to build a practice rather than work a backlog. If your background is corporate IT security, or you want a fully remote job or governance work with no customer contact, this is not the one.