Senior OT Security Architect — Industrial ICS

EY; San Mateo (CA); On-site; USD 126,000 - 219,000; Full time

Job summary

EY seeks an experienced Security Architect – Operational Technology (OT) to provide architecture guidance and technical oversight for industrial environments.

The role supports site-level design reviews, network segmentation validation, secure connectivity planning, exception analysis, operational readiness, and risk-based decision-making while collaborating with engineering, operations, and site teams to ensure secure, maintainable OT solutions.

Qualifications

• Bachelor's degree in cybersecurity, information technology, engineering, computer science, or related field preferred.
• 8–10+ years in cybersecurity, infrastructure, or security architecture.
• 5+ years supporting OT, manufacturing, or critical infrastructure environments.
• Strong knowledge of network security, firewalls, segmentation, and secure connectivity.
• Experience reviewing designs against architecture standards and requirements.

Responsibilities

• Apply established OT cybersecurity standards and approved design patterns to site-level implementations.
• Review OT network, firewall, secure access, monitoring, and infrastructure designs for alignment with approved standards.
• Identify gaps between proposed implementations and established architecture requirements.
• Recommend practical remediation options for design constraints, exceptions, or operational support concerns.
• Support architecture reviews for site implementations, modernization activities, and operational changes.
• Validate alignment with segmentation, zoning, firewall, remote access, monitoring, and operational support expectations.
• Participate in design discussions for complex OT implementations.
• Partner with engineering and operations teams to support transition of approved designs into steady-state support.
• Provide technical input for exception reviews, risk acceptance discussions, and remediation planning.
• Escalate material design risks, control gaps, or operational concerns through governance channels.
• Ensure architecture decisions and risk outcomes are documented and supportable.
• Review secure connectivity patterns involving firewalls, remote access, segmentation controls, monitoring platforms, and related infrastructure.

Skills

OT security architecture

Network security

Firewall policy

Zero Trust

Risk assessment

Industrial networking

Stakeholder management

Documentation

Education

Bachelor's degree

Job description

EY seeks an experienced Security Architect – Operational Technology (OT) to provide architecture guidance and technical oversight for industrial environments.

The role supports site-level design reviews, network segmentation validation, secure connectivity planning, exception analysis, operational readiness, and risk-based decision-making while collaborating with engineering, operations, and site teams to ensure secure, maintainable OT solutions.