OT Cybersecurity Architect / Engineer
Job Description
Role: OT Cybersecurity Architect / Engineer (Governance & Asset Inventory)
\n
\n
Must Have Technical/Functional Skills
\n
• Hands-on experience deploying and operating Runzero, Maximo, and ServiceNow (SNOW) in OT or ICS environments.
\n
• Experience validating asset scan coverage, credentialed access, reporting completeness, inventory hierarchy, and ongoing synchronization.
\n
• Experience performing OT asset inventory gap analysis and driving identified gaps to closure with site stakeholders.
\n
• Experience establishing Secure Network processes, SNOW workflows, site intake, and change approval processes.
\n
• Working knowledge of Algosec firewall policy management, Palo Alto and Check Point firewalls, and Cisco Catalyst 9000 series switching.
\n
• Working knowledge of OT and ICS environments and standards, including IEC 62443 and NIST SP 800-82.
\n
• Good to have: Familiarity with Nozomi, Zscaler ZIA/ZPA, CyberArk PAM/PSM, CMMC, EASA Part-IS, and NIS2.
\n
• Experience supporting global, multi-site industrial or manufacturing environments with strong communication, stakeholder coordination, and documentation skills.
\n
\n
Role:OT Cybersecurity Architect / Engineer (Tools, Architecture & Compliance)
\n
\n
Must Have Technical/Functional Skills
\n
• Hands-on experience deploying and operating Nozomi Guardian/CMC, Zscaler ZIA/ZPA, and CyberArk PAM/PSM in OT or ICS environments.
\n
• Experience with tool design, configuration, validation, stabilization, and handover to support across multiple sites.
\n
• Experience defining OT malware scanning and OT wireless security strategies aligned with industrial operational constraints.
\n
• Experience developing OT reference architectures, target-state diagrams, control mappings, and adoption guidance.
\n
• Working knowledge of CMMC, EASA Part-IS, NIS2, IEC 62443, and NIST SP 800-82.
\n
• Experience conducting compliance gap assessments, preparing evidence packages, and tracking remediation actions to closure.
\n
• Good to have: Runzero, Maximo, ServiceNow, Algosec, Palo Alto, Check Point, Cisco Catalyst 9000, RF planning, OT segmentation, Windows/Linux administration, and AWS/Azure administration.
\n