Water Utilities OT Security Architect

Amyx, Inc.; Washington (District of Columbia); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical, Dental, and Vision Plans

401(k) with matching contributions

Health Savings Account (HSA)

Flexible Spending Accounts (Health & F

PTO and Holidays

Professional Development Reimbursement

Job summary

Amyx, Inc. seeks a Cyber Security SME with deep OT/ICS security expertise for water and wastewater utilities. Lead cybersecurity strategy, architecture, and risk management for ICS/SCADA and process automation systems critical to water infrastructure.

Ensure compliance with federal standards and support EPA programs. The role involves designing segmentation (Purdue, DMZ), integrating OT telemetry into SOC/SIEM, conducting risk assessments, maintaining SSPs/POA&Ms, and developing incident

Qualifications

• 10+ years in cybersecurity.
• 8+ years in OT/ICS security for water utilities or critical infrastructure.
• Hands-on with SCADA platforms, OT protocols, and passive monitoring tools.
• Strong knowledge of NIST SP 800-82, ISA/IEC 62443, and RMF.
• U.S. Citizenship; Public Trust eligibility.

Responsibilities

• OT Cybersecurity Strategy: Develop and implement security architectures for water OT environments (SCADA, PLCs, RTUs, HMIs).
• Design segmentation strategies (Purdue Model, DMZ, secure remote access).
• Integrate OT telemetry into enterprise SOC/SIEM for threat detection.
• Risk Assessment & Compliance: Conduct OT risk assessments for water/wastewater systems and align with applicable standards.
• Prepare and maintain System Security Plans (SSPs), POA&Ms, and RMF documentation.
• Incident Response & Resilience: Develop OT-specific incident response playbooks and tabletop exercises; support forensic analysis and recovery planning for cyber-physical systems.
• Stakeholder Engagement: Collaborate with water utility operators, engineers, and EPA program leads; deliver executive briefings and technical reports on OT cyber posture.
• Must have the ability to communicate accurate information.

Skills

OT cybersecurity expertise

Communicating OT cyber posture to exec

Education

Bachelor's in Cybersecurity/Engineering

Certifications: GICSP, CISSP, GRID, ISA/IEC 62443

Tools

SCADA platforms (Wonderware, Ignition, OSIsoft PI)

OT protocols (Modbus, DNP3, OPC-UA)

Passive monitoring tools (Nozomi, Claroty, Dragos)

Job description

Amyx, Inc. seeks a Cyber Security SME with deep OT/ICS security expertise for water and wastewater utilities. Lead cybersecurity strategy, architecture, and risk management for ICS/SCADA and process automation systems critical to water infrastructure.

Ensure compliance with federal standards and support EPA programs. The role involves designing segmentation (Purdue, DMZ), integrating OT telemetry into SOC/SIEM, conducting risk assessments, maintaining SSPs/POA&Ms, and developing incident