IT Architect Principal

 

Required Education and Experience
• Bachelor''s Degree

Preferred Certifications (in lieu of or in addition to degree):
o IEC 62443 Cybersecurity Expert
o CISSP
o SANS OT Certifications
o CCNP / CCIE / CCDE (Industrial & security focus)

Required Skills & Experience
• 7–12+ years in Networking with OT/ICS environments
• Strong architecture experience across:
o Industrial networks
o OT DMZ design
o Secure remote access
o OT monitoring platforms
o Networking – Routing & Switching concepts
o Network & security architecture design
o Segmentation
o IEC 62443
o NIST SP800-82r3
o NIST CSF
o CISv8
o Purdue Model / OSI / TCPIP Model
o Zero Trust concepts applied to OT

Operational Abilities:
o Workload
o Safety
o Availability
o Security

Soft Skills & General:
• Solid communications
• Ability to lead design strategy across large groups and initiatives
• Ability to define, bridge, and communicate the direction of OT target-state cybersecurity architectures

Job Responsibilities
• Lead design strategy and OT architecture across large groups and initiatives
• Define, bridge, and communicate the direction of OT target-state cybersecurity architectures
• Partner with Cyber teams to align OT architecture strategy with overall cyber roadmap
• Act as the main resource lead for OT Security Analyst support
• Communicate and share updates with leadership
• Design strategy for visibility, secure remote access, segmentation, zoning, and conduit models per IEC 62443, NIST SP 800-82r3
• Develop and publish secure reference architectures for:
o Manufacturing sites
o Remote access
o Other as needed related to OT security
• Translate cybersecurity requirements into implementable designs aligned with the OT cybersecurity strategy
• Support M&A or greenfield OT security architectures across domestic/international MFG discussions and projects
• Support, evaluate, select, and implement OT security technologies (visibility, SRA, endpoint protection, segmentation, monitoring, vulnerability, identity, data security, etc.)
• Lead OT cybersecurity design reviews and technical security requirements
o Engineering teams
o System integrators
o IT, MFG-IT teams
o Cybersecurity teams
• Participating in and support OT tabletop exercises as needed
• Align OT security architecture to controls from IEC 62443, NIST SP800-82r3, CISv8, NIST CSF