Senior OT Security Architect - Industrial Environments

EY; Buffalo (NY); Hybrid; USD 125,800 - 218,500; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

401(k) retirement plan

Paid time off

Job summary

EY seeks an experienced Security Architect – Operational Technology (OT) to provide architecture guidance and technical oversight for industrial, manufacturing, laboratory, and OT environments.

The role supports site-level design reviews, network segmentation validation, secure connectivity planning, exception analysis, operational readiness, and risk-based technical decision-making across cybersecurity, infrastructure, engineering, and site teams.

Qualifications

• Bachelor's degree in cybersecurity, IT, engineering, CS, or related field.
• 8–10+ years in cybersecurity, infrastructure, networking or security architecture.
• 5+ years supporting OT, manufacturing, or critical infrastructure environments.
• Strong communication, documentation, and risk-based decision making.

Responsibilities

• Provide site-level OT security architecture guidance and oversight.
• Review and validate network segmentation, secure connectivity, and firewall designs.
• Assess risks, analyze exceptions, and support remediation planning.
• Collaborate with engineering, operations, and security teams to ensure design conformance.

Skills

Architecture

Infrastructure

Operations

OT security

Network segmentation

Secure remote access

Risk assessment

Zero Trust

Industrial networking

Documentation

Stakeholder coordination

Education

Bachelor's degree in Cybersecurity, Information Technology, Engineering, Computer Science, or related field

Job description

EY seeks an experienced Security Architect – Operational Technology (OT) to provide architecture guidance and technical oversight for industrial, manufacturing, laboratory, and OT environments.

The role supports site-level design reviews, network segmentation validation, secure connectivity planning, exception analysis, operational readiness, and risk-based technical decision-making across cybersecurity, infrastructure, engineering, and site teams.