OT Security Architect (Specialist Consultancies)

Role Overview

Principal OT Security Architect

Oil & Gas (upstream/downstream)

Utilities (Power, Water, Nuclear)

1. Cross-Border Strategic Advisory & Governance

• **Multi-Country Architecture Frameworks:**
• Design and harmonize enterprise-wide OT security architectures that span multiple geographic regions, balancing global corporate blueprints with localized operational realities.
• **Regulatory & Compliance Mapping:**
• Navigate and align complex international regulatory landscapes and local mandates across jurisdictions (e.g., NIST SP 800-82, NIS 2 Directive, NERC CIP, and regional GCC/SDAIA/NCSA directives).
• **Risk & Capability Maturity Assessments:**
• Lead comprehensive, multi-site OT security assessments, threat modeling, and risk profiling to build multi-year security roadmaps for client executives (C-Suite and Board level).

2. Technical Architecture & Engineering

• **Purdue Model Blueprinting:**
• Design secure-by-design architectures from Level 0 (Process) to Level 5 (Enterprise), ensuring robust network segmentation, boundary protection, and secure industrial demilitarized zones (iDMZs).
• **Legacy Integration & Modernization:**
• Architect secure integration strategies for legacy SCADA, DCS, PLC, and SIS environments with modern industrial IoT (IIoT), cloud analytics, and edge computing platforms.
• **Threat Detection & Incident Response:**
• Design and oversee the deployment of OT-specific monitoring solutions (e.g., continuous threat detection, asset discovery tools) and integrate them with centralized or federated Security Operations Centers (SOC).

3. Engagement Leadership & Practice Development

• **Consulting Delivery:**
• Lead high-performing, distributed engineering and advisory teams, ensuring projects are delivered on time, within scope, and at the highest quality standards.
• **Thought Leadership:**
• Represent the firm at global industry forums, contribute to white papers, and continuously mature the firm's internal OT security frameworks, methodologies, and accelerator toolkits.

& ExperienceExperience

• **7+ Years of Dedicated OT/ICS Security Experience:**
• Proven track record specifically focused on securing industrial environments, embedded systems, and critical infrastructure.
• **Sector Expertise (Oil & Gas / Utilities):**
• Deep, firsthand domain knowledge of industrial processes within Oil & Gas (refineries, pipelines, offshore platforms) or Utilities (power generation, transmission, distribution, and water treatment).
• **Consulting / Client-Facing Background:**
• Minimum of 3 years in a professional services or management consulting environment, demonstrating an ability to manage scope, navigate client politics, and articulate technical risk in business terms.
• **Global/Multi-Country Delivery:**
• Documented experience executing projects or managing architectures across multiple countries, time zones, and cultural environments.

Technical & Professional Certifications

• **ISA/IEC 62443 Certifications (Highly Preferred):**
• *ISA/IEC 62443 Cybersecurity Design Specialist*
• or
• *Cybersecurity Security Authority*
• .
• **Other Relevant Industry Certifications:**
• GIAC Global Industrial Cyber Security Professional (

Gicsp

GRID