Cyber SDC - OT - Security Architect

About the role

Senior OT security architecture advisor supporting secure and supportable industrial environments.

Role positioning

Senior / Lead Architect. This role applies and interprets established architecture standards rather than defining enterprise standards or performing routine day-to-day governance queue execution.

Key responsibilities

• Apply established OT cybersecurity standards and approved design patterns to site-level implementations
• Review proposed OT network, firewall, secure access, monitoring, and infrastructure designs for alignment with approved standards
• Identify gaps between proposed implementations and established architecture requirements
• Recommend practical remediation options for design constraints, exceptions, or operational support concerns
• Support architecture reviews for site implementations, modernization activities, and operational changes
• Validate alignment with segmentation, zoning, firewall, remote access, monitoring, and operational support expectations
• Participate in design discussions for complex, high-risk, or non-standard OT implementations
• Partner with engineering and operations teams to support transition of approved designs into steady-state support
• Support technical risk assessments and impact analysis for non-standard architecture decisions
• Provide technical input for exception reviews, risk acceptance discussions, and remediation planning
• Escalate material design risks, control gaps, or operational concerns through appropriate governance channels
• Ensure architecture decisions and risk outcomes are documented and supportable
• Review secure connectivity patterns involving firewalls, remote access, segmentation controls, monitoring platforms, and related infrastructure
• Support alignment of applicable Zero Trust principles to OT users, devices, applications, and remote access use cases
• Advise on technical dependencies that may affect implementation, operations, lifecycle management, or supportability
• Validate that designs include monitoring, alerting, documentation, support records, and escalation considerations
• Support operational readiness discussions and post-implementation improvement activities
• Provide senior technical advisory support for complex OT security architecture decisions
• Develop reusable guidance, lessons learned, and implementation patterns based on site delivery experience

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Engineering, Computer Science, or related field preferred
• 8–10+ years of experience in cybersecurity, infrastructure, networking, industrial technology, or security architecture roles
• 5+ years supporting OT, manufacturing, industrial, engineering, laboratory, or critical infrastructure environments
• Strong understanding of network security, firewalls, segmentation, secure connectivity, remote access, and infrastructure support concepts
• Experience reviewing technical designs against established architecture standards and operational requirements
• Strong communication, documentation, stakeholder management, and risk-based decision-making skills

Preferred qualifications

• Experience supporting manufacturing or industrial site environments
• Knowledge of ICS and OT architectures, Purdue Model concepts, NIST CSF, and IEC 62443 concepts
• Experience with firewall policy review, network segmentation, secure remote access, OT asset visibility, or security monitoring platforms
• Relevant certifications such as CISSP, GICSP, GIAC, IEC 62443, Security+, Network+, or comparable security/network credentials

Technical skills

• OT security architecture
• Network segmentation
• Firewall policy architecture
• Secure remote access
• Zero Trust principles
• Security monitoring concepts
• Industrial networking
• Routing and switching
• Operational readiness
• Risk assessment
• Documentation and handoff
• Stakeholder coordination

Pay

Base salary range for all geographic locations in the US: $104,800 to $192,200. Base salary range for New York City Metro Area, Washington State and California (excluding Sacramento): $125,800 to $218,500. Individual salaries determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography.

Benefits

• Medical and dental coverage
• Pension and 401(k) plans
• Wide range of paid time off options

Schedule

Team-led and leader-enabled hybrid model. Most people in external, client serving roles work together in person 40-60% of the time over the course of an engagement, project or year. Flexible vacation policy — decide how much vacation time you need based on your own personal circumstances. Also granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed.