Senior OT Security Architect: Industrial Cyber & Risk

EY; Washington (District of Columbia); On-site; USD 105,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

401(k) plan

Paid time off

Job summary

EY seeks an experienced Security Architect – Operational Technology (OT) to provide architecture guidance and technical oversight for industrial, manufacturing, laboratory, and OT environments. You will lead site-level design reviews, validate network segmentation, plan secure connectivity, analyze exceptions, and support risk-based technical decisions across cross-functional teams.

The role emphasizes applying established architecture standards rather than defining enterprise standards, with a

Qualifications

• Bachelor's degree in a relevant field.
• 8–10+ years of cybersecurity, infrastructure, networking, industrial technology, or security architecture experience.
• 5+ years supporting OT, manufacturing, industrial, engineering, laboratory, or critical infrastructure environments.
• Strong understanding of network security, firewalls, segmentation, secure connectivity, remote access, and infrastructure support concepts.
• Experience reviewing technical designs against established architecture standards and operational requirements.
• Strong communication, documentation, stakeholder management, and risk-based decision-making skills.

Responsibilities

• Apply established OT cybersecurity standards and approved design patterns to site-level implementations.
• Review proposed OT network, firewall, secure access, monitoring, and infrastructure designs for alignment with approved standards.
• Identify gaps between proposed implementations and established architecture requirements.
• Recommend practical remediation options for design constraints, exceptions, or operational support concerns.
• Support architecture reviews for site implementations, modernization activities, and operational changes.
• Validate alignment with segmentation, zoning, firewall, remote access, monitoring, and operational support expectations.
• Participate in design discussions for complex, high-risk, or non-standard OT implementations.
• Partner with engineering and operations teams to support transition of approved designs into steady-state support.
• Support technical risk assessments and impact analysis for non-standard architecture decisions.
• Provide technical input for exception reviews, risk acceptance discussions, and remediation planning.
• Escalate material design risks through governance channels.
• Ensure architecture decisions and risk outcomes are documented and supportable.
• Review secure connectivity patterns involving firewalls, remote access, segmentation controls, monitoring platforms, and related infrastructure.
• Advise on Zero Trust principles for OT users, devices, applications, and remote access use cases.
• Explain dependencies affecting implementation, operations, lifecycle management, or supportability.
• Validate designs include monitoring, alerting, documentation, support records, and escalation considerations.
• Support operational readiness discussions and post-implementation improvement activities.
• Provide senior technical advisory support for complex OT security architecture decisions.
• Develop reusable guidance and implementation patterns from site delivery experience.

Skills

Cybersecurity

Networking

OT security

Risk assessment

Documentation

Stakeholder management

Education

Bachelor's degree in Cybersecurity, Information Technology, Engineering, Computer Science, or related field

Job description

EY seeks an experienced Security Architect – Operational Technology (OT) to provide architecture guidance and technical oversight for industrial, manufacturing, laboratory, and OT environments. You will lead site-level design reviews, validate network segmentation, plan secure connectivity, analyze exceptions, and support risk-based technical decisions across cross-functional teams.

The role emphasizes applying established architecture standards rather than defining enterprise standards, with a