OT Security Architect

About the role

At Bloom Energy, our vision for a world powered by clean, reliable, and affordable energy is more than just a dream—we’re making it reality. For over two decades, we’ve been at the forefront of the global energy transition, pioneering solutions that empower critical industries to thrive in a rapidly digitizing, energy-intensive world. From revolutionizing power for AI-driven data centers to ensuring resilience for hospitals, electric grids, manufacturing facilities, and utilities, our solid oxide fuel cell (SOFC) and solid oxide electrolyzer (SOEC) technologies are redefining what’s possible by delivering energy abundance for all. With more than 30,000 fuel cell modules deployed worldwide, we are the trusted partner for Fortune 100 companies and innovators alike. Our cutting-edge solutions enable unparalleled “time-to-power” capabilities, reliability, and sustainability, ensuring our customers remain ahead in a world where soaring energy demand and intensifying energy scarcity are rapidly becoming the new norm. At Bloom, we thrive on collaboration, bold thinking, and relentless innovation. We believe that, together, we can create a brighter, more sustainable future while tackling the most pressing challenges of the 21st century. We are looking for an OT Security Architect to join our team in one of today’s most exciting technologies. This role will report to Chief Security Officer based in Newark, Delaware. This is a fully on-site, 5 days in office role.

Responsibilities

• Deploy, configure, and tune OT security platforms across manufacturing sites endpoint protection, inline IPS, asset discovery, secure remote access, media scanning kiosks, and PLC backup including rulesets, allowlists, exclusions, and detection tuning on production assets.
• Own operational health of deployed tooling: agent coverage, sensor health, license utilization, upgrades, and version currency.
• Design and implement IT/OT convergence controls: OT DMZ at Level 3.5, brokered access, data flows, identity and directory integration, patching paths, and monitoring feeds.
• Implement defense-in-depth segmentation aligned to the Purdue model and ISA/IEC 62443 zone-and-conduit design, VLANs and rulesets, micro segmentation, and virtual patching for legacy assets partnering with Network Engineering on switching, routing, firewalls, wireless, IIoT, edge, and WAN.
• Run OT asset discovery and integrate telemetry into enterprise SIEM, EDR/XDR, NDR, and vulnerability management; maintain inventory and drive end-of-life OS remediation.
• Implement and test PLC/HMI backup, versioning, and golden-image recovery; support OT incident response and recovery, and lead POCs and production rollouts for new OT security technologies.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Electrical Engineering, Industrial Engineering, Computer Engineering, or a related technical discipline, or equivalent hands-on experience.
• 8+ years of cyber security, network, or infrastructure engineering experience, including 4+ years hands-on OT/ICS cyber security in production industrial or manufacturing environments.
• Demonstrated hands-on deployment and operation of OT security tooling at multiple