Senior OT Security Architect - Secure Connectivity

EY; Chantilly (VA); Hybrid; USD 104,800 - 192,200; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Paid time off

Job summary

EY is seeking an experienced Security Architect – Operational Technology to provide architecture guidance and technical oversight for industrial, manufacturing, laboratory, and OT environments. You will lead site-level design reviews, assess network segmentation, plan secure connectivity, and support risk-based decision-making across cybersecurity, infrastructure, engineering and operations teams.

This senior role emphasizes applying established standards, guiding non-standard implementations,

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Engineering, Computer Science, or related field preferred.
• 8–10+ years in cybersecurity, infrastructure, networking, industrial technology, or security architecture roles.
• 5+ years supporting OT, manufacturing, industrial, engineering, laboratory, or critical infrastructure environments.
• Strong understanding of network security, firewalls, segmentation, secure connectivity, remote access, and infrastructure support concepts.
• Experience reviewing technical designs against established architecture standards and operational requirements.
• Strong communication, documentation, stakeholder management, and risk-based decision-making skills.

Responsibilities

• Apply established OT cybersecurity standards and approved design patterns to site-level implementations.
• Review proposed OT network, firewall, secure access, monitoring, and infrastructure designs for alignment with approved standards.
• Identify gaps between proposed implementations and established architecture requirements.
• Recommend practical remediation options for design constraints, exceptions, or operational support concerns.
• Support architecture reviews for site implementations, modernization activities, and operational changes.
• Validate alignment with segmentation, zoning, firewall, remote access, monitoring, and operational support expectations.
• Participate in design discussions for complex, high-risk, or non-standard OT implementations.
• Partner with engineering and operations teams to support transition of approved designs into steady-state support.
• Support technical risk assessments and impact analysis for non-standard architecture decisions.
• Provide technical input for exception reviews, risk acceptance discussions, and remediation planning.
• Escalate material design risks, control gaps, or operational concerns through appropriate governance channels.
• Ensure architecture decisions and risk outcomes are documented and supportable.
• Review secure connectivity patterns involving firewalls, remote access, segmentation controls, monitoring platforms, and related infrastructure.
• Support alignment of applicable Zero Trust principles to OT users, devices, applications, and remote access use cases.
• Advise on technical dependencies that may affect implementation, operations, lifecycle management, or supportability.
• Validate that designs include monitoring, alerting, documentation, support records, and escalation considerations.
• Support operational readiness discussions and post-implementation improvement activities.
• Provide senior technical advisory support for complex OT security architecture decisions.
• Develop reusable guidance, lessons learned, and implementation patterns based on site delivery experience.

Skills

OT security architecture

Network segmentation

Zero Trust

Risk assessment

Security monitoring

Education

Bachelor's degree in Cybersecurity/Engineering/IT

Tools

Firewall policy review

Industrial networking

Job description

EY is seeking an experienced Security Architect – Operational Technology to provide architecture guidance and technical oversight for industrial, manufacturing, laboratory, and OT environments. You will lead site-level design reviews, assess network segmentation, plan secure connectivity, and support risk-based decision-making across cybersecurity, infrastructure, engineering and operations teams.

This senior role emphasizes applying established standards, guiding non-standard implementations,