Lead enterprise OT cybersecurity architecture for regulated manufacturing environments. Define security standards, reference architectures, governance frameworks, network segmentation, secure IT/OT and cloud connectivity, identity and access controls, vulnerability management, and incident response requirements. Apply IEC 62443, NIST SP 800-82, the Purdue Model, industrial DMZ architectures, and defense-in-depth principles. Facilitate cross-functional workshops, technical reviews, governance forums, and standards approval across IT, OT, engineering, manufacturing, quality, and cybersecurity teams.
This is a remote position.
We are looking for a Principal OT Security Architect (Lead) to lead the development of enterprise Operational Technology cybersecurity standards, reference architectures, and security guidelines for regulated manufacturing environments.
You will act as the primary consultant defining OT security principles, network segmentation requirements, secure integration patterns, and governance standards, working closely with IT, OT, Engineering, Manufacturing, Quality, and Cybersecurity teams.
Key responsibilities
- Lead stakeholder workshops across IT, OT, Engineering, Manufacturing, Quality, and Cybersecurity teams.
- Define OT cybersecurity strategy, architecture principles, and governance frameworks.
- Develop Security Zones and Conduits methodologies aligned with IEC 62443.
- Define Defence-in-Depth security architecture using the Onion Model.
- Establish OT network segmentation and firewall architecture standards.
- Define secure connectivity requirements between OT, enterprise IT, and cloud environments.
- Develop OT identity and access management requirements, including privileged access controls.
- Establish cybersecurity requirements for vulnerability management and incident response.
- Ensure alignment with industry regulations, corporate standards, and data protection requirements.
- Lead technical reviews, governance forums, and document sign-off activities.
Requirements
- 12+ years of cybersecurity experience, including 7+ years specifically in OT/ICS cybersecurity.
- Experience in regulated manufacturing environments.
- Strong knowledge and practical application of IEC 62443 and NIST SP 800-82.
- Expertise in Industrial Control Systems and manufacturing cybersecurity.
- Experience conducting OT risk assessments and defining security governance.
- Strong understanding of the Purdue Model, industrial DMZ architectures, and network segmentation.
- Expertise in firewall security architecture.
- Knowledge of identity and access management for OT environments.
- Experience with OT incident response.
- Ability to lead cross-functional workshops and translate security requirements into enterprise standards and reference architectures.
Benefits
- Locations: New Jersey, USA or CEE region
- Contract Type: Freelance / Contract
- Start date: October, 2026
- Time Allocation: 40 hours/week
Similar Jobs
Blockchain • eCommerce • Fintech • Payments • Software • Financial Services • Cryptocurrency
Own worldwide marketing for Square’s channel sales motions, including resellers and independent contractors. Build scalable co-marketing, enablement, content, events, demand-generation, incentive, recruitment, and partner community programs. Define co-marketing fund allocation, collaborate with sales and regional teams, support partner adoption, strengthen brand presence, and measure program performance across international markets.
Artificial Intelligence • Cloud • Computer Vision • Hardware • Internet of Things • Software
Leads hands-on software engineering for Samsara’s telematics products, guiding ambiguous initiatives from customer discovery through production and scale. Responsibilities include writing critical-path code, setting technical direction, making architecture decisions, ensuring reliability and performance, and mentoring engineers. The role partners closely with customers, Product, Design, and other engineering teams to build and grow customer-facing products, while hiring and developing an inclusive, high-performing team.
Top Skills:
APIsIot
Cloud • Security • Software • Cybersecurity • Automation
Leads the engineering organization responsible for GitLab Dedicated, a single-tenant enterprise SaaS platform. Owns strategy, roadmap, reliability, compliance, infrastructure investments, customer migrations, and enterprise-grade SLAs. Oversees distributed engineering managers and teams across orchestration, resilience, control-plane APIs, public-sector platforms, FedRAMP readiness, AWS GovCloud, and migration tooling. Partners with executives, Product, Security, and Support while scaling the organization, improving operational efficiency, and incorporating AI-enabled engineering workflows.
Top Skills:
Ai-Enabled WorkflowsAPIsAws GovcloudCellular ArchitecturesDevsecopsGeo ReplicationGitlabGitlab DedicatedInfrastructure As CodeSaaS
What you need to know about the Manchester Tech Scene
Home to a £5 billion digital ecosystem, including MediaCity, which consists of major players like the BBC, ITV and Ericsson, Manchester is one of the U.K.'s top digital tech hubs, at the forefront of advancements in film, television and emerging sectors like as e-sports, while also fostering a community of professionals dedicated to pushing creative and technological boundaries.
