Security Architect - IT/OT Modernization

About the role

West Monroe is seeking a Security Architect to join our Cybersecurity & Enterprise Technology practice, with a primary focus on Energy & Utilities. This role sits at the intersection of cybersecurity, IT/OT integration, enterprise modernization, and emerging AI-enabled security capabilities.

Responsibilities

• Architect Secure IT/OT & Enterprise Environments
• Design secure, scalable architectures across converged IT and OT environments
• Secure integration of operational systems such as SCADA, EMS, ADMS, DERMS, and other industrial platforms with enterprise IT systems (ERP, CRM, analytics, cloud platforms)
• Develop security reference architectures supporting IT/OT convergence and infrastructure modernization
• Embed Zero Trust principles, segmentation, identity controls, and monitoring into modernized environments
• Lead Enterprise Cybersecurity Tooling Strategy
• Evaluate, select, design, and implement enterprise cybersecurity solutions across: Identity & Access Management (IAM) and privileged access, Network security and micro-segmentation, Endpoint detection & response (EDR/XDR), SIEM and SOAR platforms, OT monitoring platforms (e.g., Dragos and other ICS security solutions), Data protection, DLP, and cloud security services
• Develop integrated tooling roadmaps aligned to business risk, regulatory requirements, and operational resilience
• Integrate OT and enterprise telemetry into unified SOC and monitoring environments
• Transform Cybersecurity Operations
• Assess and modernize IT and OT security operations capabilities
• Architect and implement SIEM, SOAR, and next-generation detection & response solutions
• Design SOC operating models that support hybrid IT/OT ecosystems
• Leverage automation, orchestration, and advanced analytics to enhance detection and response outcomes
• Design & Secure AI-Enabled Environments
• Evaluate and design AI-enabled solutions that enhance cybersecurity operations, including: AI-assisted threat detection and anomaly analysis, Automated investigation and response workflows, Predictive risk modeling and analytics
• Architect secure AI infrastructure that supports lines of business, ensuring: Secure model deployment environments, Data protection and access controls for training and inference pipelines, Monitoring and logging for AI systems, Alignment to responsible AI and regulatory considerations
• Advise clients on risk management strategies for AI systems, including model integrity, data security, and operational resilience
• Strengthen Governance, Risk & Compliance
• Lead security posture and maturity assessments
• Design and implement programs aligned to frameworks such as: NERC CIP, IEC 62443, NIST, CSF / 800-53, ISO 27001
• Align AI, IT, and OT security controls with regulatory and compliance requirements
• Support audit readiness and control validation initiatives
• Drive Client & Practice Impact
• Facilitate architecture workshops, security assessments, and executive strategy discussions
• Act as a trusted advisor to CIOs, CISOs, and operational leadership
• Support proposal development, solution design, and client presentations
• Contribute to development of IT/OT and AI security reference architectures and thought leadership

Requirements

7–10+ years of experience in security architecture, enterprise cybersecurity engineering, or IT/OT architecture

Strong understanding of IT/OT convergence and industrial control systems (ICS) security

Demonstrated experience designing, implementing, and evaluating enterprise cybersecurity tooling, including: IAM and identity governance, Network security architecture and segmentation, Endpoint detection technologies, SIEM/SOAR and SOC tooling, OT monitoring platforms (e.g., Dragos or similar), Cloud-native security solutions

Familiarity with AI-enabled security technologies and securing AI/ML infrastructure

Experience modernizing and integrating security operations across hybrid environments

Familiarity with emerging AI governance and model risk management frameworks

Relevant certifications (CISSP, CISM, CCSP, cloud security certifications)

Experience with platforms such as Splunk, Microsoft Sentinel, Google SecOps, Palo Alto, ServiceNow SecOps, SailPoint, Okta, CrowdStrike, or similar enterprise tools