OT Technical Security Architect

The OT Security Architect is responsible for designing, implementing, and governing cybersecurity architectures that protect industrial control systems (ICS), supervisory control and data acquisition (SCADA) environments, manufacturing systems, and other operational technology assets. This role serves as the technical authority for OT cybersecurity strategy, ensuring secure operations while maintaining the availability, integrity, and safety of critical industrial processes. The OT Security Architect collaborates with engineering, manufacturing, infrastructure, cybersecurity risk, and compliance teams to develop secure OT environments aligned with business objectives, regulatory requirements, and industry frameworks such as NIST CSF, ISA/IEC 62443, NERC CIP, and CISA guidance.

OT Security Architecture & Strategy

• Develop and maintain the enterprise OT security architecture roadmap.
• Design secure architectures for industrial control systems, SCADA networks, distributed control systems (DCS), and manufacturing environments.
• Support development and ongoing updates of OT cybersecurity standards, patterns, and technical requirements.
• Partner with (and in some instances lead) technical lead/teams to ensure the integration of security-by-design principles into OT projects and modernization initiatives.

• Evaluate emerging technologies and recommend security controls for industrial environments. Risk Management & Governance

• Conduct OT security risk assessments and threat modeling exercises.
• Identify vulnerabilities within industrial environments and recommend mitigation strategies.
• Support development and ongoing updates of OT security policies, standards, and control frameworks.
• Ensure alignment with corporate risk management, cybersecurity, and compliance programs.

• Support audit activities and regulatory compliance efforts. Network & Infrastructure Security

• Design OT network segmentation, Purdue Model architectures, and secure remote access solutions.
• Define requirements for firewalls, industrial DMZs, jump hosts, and network monitoring capabilities.
• Review configurations and security controls across OT environments.

• Partner with infrastructure and plant operations teams to secure industrial networks and connected assets. Security Operations & Incident Response

• Support development of OT security monitoring and detection capabilities.
• Design logging and telemetry requirements for industrial systems.
• Participate in incident response planning and exercises involving OT environments.
• Provide subject matter expertise during cybersecurity incidents affecting manufacturing or operational systems.
• Recommend containment and recovery strategies while minimizing operational disruption.

• Vendor & Technology Management Evaluate OT security products and technologies, including: Industrial firewalls

• Network detection and response (NDR)
• OT asset discovery platforms
• Secure remote access solutions
• Vulnerability management tools
• Review vendor security architectures and third-party connectivity requirements.

• Support procurement and implementation of OT cybersecurity solutions. Stakeholder Collaboration

• Partner with plant operations, engineering, reliability, automation, and cybersecurity teams.
• Communicate risks, design decisions, and security requirements to technical and business stakeholders.
• Provide guidance and mentorship to OT engineers, security analysts, and project teams.
• Lead cross-functional initiatives to improve OT cybersecurity maturity.

Applicants must be legally authorized to work in the United States. Sponsorship not available., * Bachelor’s degree in Cybersecurity, Information Technology, Engineering, Computer Science, or related field.

• 8+ years of cybersecurity experience with at least 3+ years focused on OT/ICS security.
• Demonstrable experience securing manufacturing, industrial, utility, transportation, energy, or critical infrastructure environments.
• Strong understanding of:
• Industrial Control Systems (ICS)
• SCADA environments
• PLCs, RTUs, and HMIs
• DCS environments
• Industrial networking protocols
• Demonstrable experience designing enterprise security architectures.
• Knowledge of cybersecurity frameworks including:
• ISA/IEC 62443
• NIST Cybersecurity Framework
• NIST 800-82
• CIS Controls
• NERC CIP (where applicable)
• Experience with risk assessment, threat modeling, and security architecture reviews.
• Master’s degree in Cybersecurity, Engineering, or related discipline.
• Professional certifications such as:
• CISSP
• GICSP
• GRID
• GCIP
• CISM
• CCSP
• SABSA or TOGAF
• Experience implementing and maintaining OT asset inventory and visibility solutions.
• Experience with cloud-connected manufacturing environments and Industry 4.0 initiatives.
• Familiarity with Zero Trust concepts in OT environments.
• OT & Industrial Technologies
• SCADA
• DCS
• PLC platforms (Rockwell, Siemens, Schneider, ABB, etc.)
• Industrial Ethernet
• Modbus
• OPC-UA
• Profinet
• EtherNet/IP
• Industrial wireless technologies

The final salary or hourly wage, as applicable, paid to each candidate/applicant for this position is ultimately dependent on a variety of factors, including, but not limited to, the candidate’s/applicant’s qualifications, skills, and level of experience as well as the geographical location of the position.

This position is a contract/temporary role where Hays offers you the opportunity to enroll in full medical benefits, dental benefits, vision benefits, 401K and Life Insurance ($20,000 benefit).

Why Hays?

You will be working with a professional recruiter who has intimate knowledge of the industry and market trends. Your Hays recruiter will lead you through a thorough screening process in order to understand your skills, experience, needs, and drivers. You will also get support on resume writing, interview tips, and career planning, so when there’s a position you really want, you’re fully prepared to get it.

Nervous about an upcoming interview? Unsure how to write a new resume?

Visit the Hays Career Advice section to learn top tips to help you stand out from the crowd when job hunting.

Hays is committed to building a thriving culture of diversity that embraces people with different backgrounds, perspectives, and experiences. We believe that the more inclusive we are, the better we serve our candidates, clients, and employees. We are an equal employment opportunity employer, and we comply with all applicable laws prohibiting discrimination based on race, color, creed, sex (including pregnancy, sexual orientation, or gender identity), age, national origin or ancestry, physical or mental disability, veteran status, marital status, genetic information, HIV-positive status, as well as any other characteristic protected by federal, state, or local law. One of Hays’ guiding principles is ‘do the right thing’. We also believe that actions speak louder than words. In that regard, we train our staff on ensuring inclusivity throughout the entire recruitment process and counsel our clients on these principles. If you have any questions about Hays or any of our processes, please contact us.

In accordance with applicable federal, state, and local law protecting qualified individuals with known disabilities, Hays will attempt to reasonably accommodate those individuals unless doing so would create an undue hardship on the company. Any qualified applicant or consultant with a disability who requires an accommodation in order to perform the essential functions of the job should call or text 813.336.5570.