Senior OT/IoT Security Consultant

Title: Senior OT/IoT Security Consultant

Location: Boise, Idaho (Remote)

Duration: 6-12 months contract

NOTE: Armis expertise is MUST.

Job Description

We are seeking a Senior OT/IoT Security Consultant to lead a high-priority security initiative for a major semiconductor manufacturer. You will be responsible for the end-to-end deployment and optimization of Armis to provide immediate environmental visibility, followed by a comprehensive current state assessment of the client’s Operational Technology (OT) environment.

This role requires a unique blend of deep technical expertise in industrial control systems (ICS) and the strategic ability to translate technical vulnerabilities into a prioritized risk-reduction roadmap.

Core Responsibilities

• Armis Deployment & Optimization: Lead the technical rollout of Armis across the OT environment to achieve 100% visibility; configure dashboards to demonstrate immediate value to the client.
• Security Assessment & Auditing: Conduct comprehensive security audits of IoT and OT devices using passive network analysis and manual inspection. Benchmark the client's current posture against standards like NIST 800-82, IEC 62443, and NIST CSF.
• Asset Discovery & Management: Validate and maintain a complete asset inventory, including SCADA, PLCs, HMIs, and "stealth" IoT devices (e.g., smart cameras, HVAC, and building systems).
• Vulnerability & Risk Management: Identify and prioritize vulnerabilities using a risk-based approach that accounts for operational safety and production impact.
• Strategy & Roadmap Development: Use insights from Armis and the gap assessment to develop a multi-year OT security strategy and prioritized remediation plan.
• Stakeholder Engagement: Act as a bridge between IT and OT teams, conducting workshops with plant engineers and executives to align security goals with business uptime and safety.

Required Technical Skillsets

• Industrial Networking: Deep understanding of the ISA-95 Purdue Model, network segmentation (zoning), and industrial-grade firewalls.
• OT Monitoring Tools: Hands-on experience with Armis (required), and familiarity with similar tools like Nozomi Networks, Cisco Cyber Vision, or Dragos.
• Framework Expertise: Demonstrated knowledge of NIST SP 800-82, IEC 62443, ISO 27001, and NERC CIP.
• Secure Remote Access: Knowledge of MFA, VPN, and jump-host configurations for third-party vendor maintenance in OT zones.
• Remediation & Patching: Experience implementing "virtual patching" via IPS and managing patches for sensitive, legacy industrial systems.

Qualifications

• Experience: Minimum of seven (7) years of experience in IoT/OT security, industrial control systems, and network segmentation within highly regulated industries.
• Certifications: Preferred certifications include CISSP, CIoTSP, GICSP, or relevant vendor-specific accreditations (e.g., Microsoft Certified Azure IoT Developer).
• Education: Bachelor’s or master’s degree in cybersecurity, engineering, or a closely related field.
• Soft Skills: Proven ability to communicate technical findings through audit-ready documentation and business-impact narratives.