IT / OT Infrastructure and Cyber Architect

About the role

The IT-OT Infrastructure & Cyber Architect at AdvanSix is responsible for defining, designing, and governing secure, resilient, and scalable infrastructure architectures and processes that are fit for purpose across enterprise IT and operational technology (OT) environments. This role ensures that infrastructure platforms—including networks, computers, cloud, identity, and industrial systems—are architected to meet business, operational, and cybersecurity requirements.

Responsibilities

• Define and maintain target-state architecture for IT and OT infrastructure, including networks, servers, virtualization, cloud platforms, identity, and supporting services.
• Design secure, resilient, and scalable architectures for enterprise and plant environments, supporting availability, performance, and operational safety requirements.
• Develop and maintain architecture standards, patterns, and reference designs for IT and OT environments.
• Partner with enterprise architecture, application, and OT teams to ensure consistent adoption of standards and integration across domains.
• Cybersecurity Architecture:
  • Embed security-by-design principles into all IT and OT infrastructure architectures.
  • Define and enforce cybersecurity architecture controls aligned to frameworks such as NIST CSF, NIST 800-53/82, IEC 62443, and Zero Trust principles.
  • Partner with cybersecurity teams to design controls for network segmentation, identity and access management, monitoring, logging, vulnerability management, and incident response.
  • Participate in architecture and security risk assessments; identify gaps and drive remediation through design and engineering standards.
• Governance, Risk & Compliance:
  • Ensure infrastructure solutions comply with corporate policies, cybersecurity standards, and regulatory requirements.
  • Support audits, risk assessments, and tabletop exercises by providing architectural insight and documentation.
  • Maintain accurate architecture documentation, diagrams, and decision records.
• Collaboration & Leadership:
  • Serve as a trusted technical advisor to IT, OT, cybersecurity, and business stakeholders.
  • Provide architectural guidance during project intake, design reviews, and technology evaluations.
  • Mentor infrastructure engineers and encourage knowledge transfer to reduce key-person dependencies.
  • Evaluate emerging technologies and recommend improvements to enhance security, resilience, and cost efficiency.

Requirements

• Bachelor’s degree in information technology, Computer Science, Engineering, or equivalent experience.
• 7+ years of progressive experience in IT infrastructure engineering and architecture.
• Demonstrated experience supporting both IT and OT environments in industrial or manufacturing organizations.
• Strong background in network, server, virtualization, and cloud infrastructure (on-prem and hybrid).
• Experience with identity and access management, directory services, and authentication platforms.
• Hands-on knowledge of OT/ICS architectures, including plant networks and industrial protocols.
• Proven experience designing infrastructure with built-in cybersecurity controls.
• Strong understanding of cybersecurity architecture principles and frameworks (e.g., NIST, IEC 62443).
• Experience designing secure architectures for segmented networks, privileged access, monitoring, and resilience.
• Able to translate cybersecurity requirements into practical infrastructure designs.

Preferred Qualifications

• Excellent communication skills with the ability to explain complex technical concepts to non-technical stakeholders.
• Strong analytical, problem-solving, and risk-management capabilities.
• Ability to influence without authority and work effectively in a matrixed organization.
• Experience in industrial manufacturing, chemical, or regulated environments.
• Cloud architecture certifications (Azure, AWS, or equivalent).
• Cybersecurity certifications (e.g., CISSP, CISM, CCSP) or OT security certifications.
• Experience supporting digital transformation or IT/OT modernization initiatives.

Pay Range

The base salary range for this role is $130,700 to $196,100 annually. We offer a range of market-competitive total rewards that include periodic pay rate adjustments based on market competitiveness. Hired applicants will be eligible for paid holidays, paid time off including vacation, eligibility to purchase company stock, tuition reimbursement, and a 401K with a competitive company match. Certain roles may be eligible for discretionary financial benefits such as incentive pay, equity awards, and participation in a deferred compensation plan. Hired applicants will be eligible for medical, dental and vision insurance, flexible spending and health savings account eligibility, employer-provided short term disability benefits, eligibility to purchase long term disability benefits, employer-provided basic life insurance and eligibility to purchase voluntary life coverages. The pay range, incentives and benefits listed above are general guidelines only and not a guarantee of total compensation or benefits. The final offer will depend on multiple factors, including but not limited to, the responsibilities of the job, experience, education, knowledge, skills, and abilities, as well as the job location, applicability of a collective bargaining agreement, length of service, internal equity, and alignment with market data. The incentive pay is dependent on your role, business results and individual performance. All aspects of total rewards offered are subject to the terms and conditions of the specific plans. At AdvanSix, we are dedicated to building a diverse, inclusive, and authentic workplace, so if you’re excited about this role but your past work experience doesn’t perfectly align with every qualification in the job posting, we encourage you to still apply. You may just be the right candidate for this or other roles. AdvanSix is an equal opportunity employer. Qualified applicants will be considered without regard to age, race, creed, color, national origin, ancestry, marital status, affectional or sexual orientation, gender identity or expression, disability, nationality, sex, religion, veteran status, or any other protected classification. To all agencies: Please, no phone calls or emails to any employee of AdvanSix about this opening. All resumes submitted by search firms/employment agencies to any employee at AdvanSix via-email, the internet or in any form and/or method will be deemed the sole property of AdvanSix, unless such search firms/employment agencies were engaged by AdvanSix for this position and a valid agreement with AdvanSix is in place. In the event a candidate who was submitted outside of the AdvanSix agency engagement process is hired, no fee or payment of any kind will be paid.