Senior OT Security Architect: Network Segmentation & Risk

EY; Orlando (FL); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Paid time off

Job summary

EY seeks an experienced Security Architect – Operational Technology to provide architecture guidance and oversight for industrial, manufacturing, laboratory, and OT environments. You will support site-level design reviews, network segmentation validation, secure connectivity planning, exception analysis, and risk-based technical decisions.

This role collaborates with cybersecurity, infrastructure, engineering, operations, and site teams to ensure OT solutions are secure, supportable, and aligned

Qualifications

• Bachelor's degree in Cybersecurity, IT, Engineering, Computer Science, or related field preferred.
• 8–10+ years in cybersecurity, infrastructure, networking, industrial tech, or security architecture roles.
• 5+ years supporting OT, manufacturing, industrial, engineering, or critical infrastructure environments.
• Strong understanding of network security, firewalls, segmentation, secure connectivity, remote access, and infrastructure support concepts.
• Experience reviewing technical designs against established architecture standards and operational requirements.
• Strong communication, documentation, stakeholder management, and risk-based decision-making skills.

Responsibilities

• Apply established OT cybersecurity standards and approved design patterns to site-level implementations.
• Review proposed OT network, firewall, secure access, monitoring, and infrastructure designs for alignment with approved standards.
• Identify gaps between proposed implementations and established architecture requirements.
• Recommend practical remediation options for design constraints, exceptions, or operational support concerns.
• Support architecture reviews for site implementations, modernization activities, and operational changes.
• Validate alignment with segmentation, zoning, firewall, remote access, monitoring, and operational support expectations.
• Participate in design discussions for complex, high-risk, or non-standard OT implementations.
• Partner with engineering and operations teams to support transition of approved designs into steady-state support.
• Provide technical input for exception reviews, risk acceptance discussions, and remediation planning.
• Escalate material design risks, control gaps, or operational concerns through governance channels.
• Review secure connectivity patterns involving firewalls, remote access, segmentation controls, monitoring platforms, and related infrastructure.
• Advise on Zero Trust principles to OT users, devices, applications, and remote access use cases.
• Develop reusable guidance, lessons learned, and implementation patterns based on site delivery experience.

Skills

OT security architecture

Network segmentation

Firewall policy review

Zero Trust

Secure remote access

Security governance

Education

Bachelor's degree in Cybersecurity/IT/Engineering/CS

Job description

EY seeks an experienced Security Architect – Operational Technology to provide architecture guidance and oversight for industrial, manufacturing, laboratory, and OT environments. You will support site-level design reviews, network segmentation validation, secure connectivity planning, exception analysis, and risk-based technical decisions.

This role collaborates with cybersecurity, infrastructure, engineering, operations, and site teams to ensure OT solutions are secure, supportable, and aligned