Principal Architect, Manufacturing Security

What you'll do

• Lead the design and delivery of OT network security improvements across a defined platform portfolio.
• Translate enterprise OT architecture standards into site-specific implementation plans for network segmentation and firewall deployment.
• Create network-executable engineering designs including firewall policies, VLAN topologies, and DMZ architectures.
• Serve as the technical lead during change window executions to ensure segmentation changes do not disrupt production.
• Deploy OT remote access controls to replace legacy VPNs and direct-vendor connections with monitored methods.
• Build the engineering knowledge base by documenting site-specific architecture decisions, playbooks, and as-built diagrams.
• Apply IEC 62443, NIST SP 800-82, and ISA-99 standards to remediate audit findings at manufacturing sites.

What we're looking for

• 10+ years of experience in OT/ICS security engineering or industrial network engineering.
• Strong hands-on experience designing and implementing OT network segmentation, including VLAN architecture and industrial firewall configuration.
• Demonstrated ability to lead OT network change projects in production-sensitive environments without causing unplanned downtime.
• Deep familiarity with OT/ICS components (PLCs, DCS, SCADA, HMI) and protocols (Modbus, Profinet, EtherNet/IP, OPC-UA, BACnet).
• Working knowledge of IEC 62443, NIST SP 800-82, and ISA-99 standards for network segmentation and zone access controls.
• Experience managing concurrent segmentation or infrastructure projects across multiple operating companies with different OT environments (preferred).
• Familiarity with OT asset discovery and network visibility platforms like Claroty, Nozomi Networks, Dragos, or Armis (preferred).
• Ability to travel 25% of the time.