> Markdown version of [/jobs/ext/4711399-security-consultant-operational-technology](https://www.wearedevelopers.com/jobs/ext/4711399-security-consultant-operational-technology). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Consultant - Operational Technology

- **Company:** World Wide Technology
- **Location:** Maryland Heights, MO, United States
- **Experience:** Experienced
- **Salary:** $82,800 - $103,500
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Spreadsheets, Cyber Security, Computer Networks, Network Address Translation, Ethernet, Data Flow Control, Health Information Management, Supervisory Control and Data Acquisition (SCADA), Identity and Access Management, Machine Learning, Modbus, Network Architecture, Network Diagrams, Routing, Remote Access Technology, OPC Unified Architecture, Technical Data Management Systems, Traffic Analysis, Virtual Local Area Networks, Data Processing, Firewalls (Computer Science), National Institute of Standards and Technology Cybersecurity Framework, Process Control Systems
- **Published:** November 14, 2026
- **Apply:** https://www.techcareers.com/job.asp?id=3514766308&tx=ZT2928THD&pt=1&aff=0B19D771-A501-4A5E-8338-2A822B784D54&utm_source=Job%20Feed&utm_medium=textkernel&utm_campaign=DE&utm_term=0B19D771-A501-4A5E-8338-2A822B784D54

## About the Role

This is a full-time position and the entry point into WWT's OT consulting practice, with a defined growth path toward the Sr. Consultant level. Prior client-facing or consulting experience is preferred. Strong networking fundamentals, familiarity with industrial control environments, and demonstrable writing ability are required., * 2-5 years of experience in cybersecurity, industrial automation, controls engineering, or enterprise networking, with demonstrated exposure to OT/ICS environments and their security concepts.

 * Demonstrated ability to produce clear, well-structured written technical content ; a writing sample or portfolio is welcome.
 * Working familiarity with industrial control system components and their operating context, including SCADA, DCS, PLCs, RTUs, HMIs, historians, and engineering workstations.
 * Working familiarity with OT protocols and their security characteristics, such as Modbus, DNP3, EtherNet/IP and CIP, PROFINET, OPC-UA, or IEC 61850.
 * Working familiarity with the Purdue Enterprise Reference Architecture and with segmentation, IDMZ, and unidirectional gateway concepts in OT environments.
 * Solid data networking fundamentals: routing and switching, VLANs, ACLs, NAT, firewall rule structure, and north-south versus east-west traffic flows.
 * Familiarity with OT asset visibility and passive monitoring platforms, including the safety rationale for passive over active discovery.
 * Familiarity with OT standards and regulatory drivers: ISA/IEC 62443, NIST SP 800-82r3, NIST CSF 2.0, and one or more of NERC CIP, TSA Security Directives, or AWIA.
 * Demonstrated ability to work with large technical data sets: spreadsheet analysis, configuration parsing, traffic and log review, and network diagramming.
 * Preferred: direct experience in an operating industrial environment (controls engineering, plant IT, maintenance, or operations); exposure to OT incident response or tabletop exercises; prior consulting, VAR, or systems-integrator experience.
 * Certifications desired: Security+, Network+, GICSP, or ISA/IEC 62443 Cybersecurity Fundamentals Specialist.

Specialized Knowledge, Skills & Abilities

Working knowledge in at least two of the following areas

 * Operational Technologies and Environments (ICS, SCADA, DCS, BAS, IIoT, IoMT)
 * Industrial Network Architecture and Segmentation (Purdue model, IDMZ, zones and conduits)
 * OT Asset Visibility, Monitoring, and Detection
 * Risk Management and Assessments
 * Policy, Governance, and Compliance (ISA/IEC 62443, NERC CIP, TSA, NIST)
 * Secure Remote Access and Third-Party/Vendor Access Governance
 * Network and Systems Security
 * Identity and Access Management

Professional Attributes

 * Professional writing is required : demonstrable ability to produce technical content at a quality level requiring editorial review rather than substantive rewriting.
 * Able to manage concurrent tasks and shifting priorities, with guidance on sequencing and trade-offs.
 * Able to communicate clearly with controls engineers, plant operators, and technical SMEs, and to adapt language for project sponsors and working-group leadership.
 * Collaborative, dependable, and responsive; willing to raise clarifying questions promptly rather than proceeding on assumption.
 * Self-directed within defined tasks, with strong problem-solving instincts and intellectual curiosity about evolving technology.
 * Willing and able to travel to client facilities on an occasional basis, and to work within plant safety, PPE, escort, and permit requirements., WWT will consider for employment, without regard to disability, a disabled applicant who satisfies the requisite skill, experience, education, and other job-related requirements of the job and is capable of performing the essential requirements of the job with or without reasonable accommodation. World Wide Technology is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, sex (including pregnancy), sexual orientation, gender identity, national origin, age, disability, veteran status, genetic information, or other characteristics protected by law. We are committed to working with and providing reasonable accommodations to individuals with disabilities. If you have a disability and you believe you need a reasonable accommodation in order to search for a job opening or to submit an online application, please call 1-800-432-7008 and ask for Human Resources.

## Description

World Wide Technology (WWT) is seeking a Security Consultant to execute the discovery and analysis work at the core of operational technology and industrial control system security engagements across critical infrastructure and manufacturing clients. This is a consulting role: you gather and analyze technical evidence, document the OT environment as operated, and draft the deliverable sections that record current state and inform the client's remediation plan. You are the consultant the client's representatives work with directly, operating under the direction of a Sr. Consultant, Lead Consultant, or Principal Consultant who owns the workstream and the finished deliverable., * Execute assigned discovery and analysis tasks within OT security workstreams, with accountability for accuracy, completeness, and on-time completion.

 * Conduct OT discovery under the direction of the workstream lead, including asset inventory and network baselining, control system architecture documentation, protocol and traffic analysis, remote access path enumeration, patch and lifecycle posture, backup and recovery review, and third-party and vendor access review.
 * Support site walkdowns and structured interviews with client controls, plant IT, operations, maintenance, safety, and vendor personnel. Capture accurate notes, document the environment as operated, and note where drawings and asset records differ from what was observed.
 * Operate safely on client sites : complete required site safety training and work within client PPE, escort, permit, and lockout/tagout requirements without exception.
 * Document current-state zones and conduits against the Purdue Enterprise Reference Architecture and IEC 62443-3-2, including trust boundaries, IDMZ posture, and the cross-level flows that deviate from the model.
 * Collect and analyze technical evidence : firewall and switch configurations, network diagrams, passive monitoring exports, asset visibility exports, remote access logs, and control system architecture documentation.
 * Support control assessment against ISA/IEC 62443, NIST SP 800-82r3, NIST CSF 2.0, and the client's obligations under NERC CIP, TSA Security Directives, AWIA, CISA Cross-Sector Cybersecurity Performance Goals, or sector equivalents, documenting the evidence behind each finding.
 * Support technology assessment by documenting which OT security technology is deployed, how it is configured, and where licensed capability is unused. Provide those findings for the workstream lead's recommendation.
 * Account for AI systems in scope by identifying machine learning and analytics components in the OT environment, including ML-based anomaly detection within monitoring platforms, vendor-hosted predictive maintenance and remote diagnostics, and any pathway by which process data leaves the facility or automated action is returned to it. Document the resulting conduits and trust boundaries.
 * Account for operational and safety constraints by documenting how safety instrumented systems, management-of-change processes, validated environments, and turnaround windows limit remediation options.
 * Draft assigned deliverable sections , including current-state summaries, gap tables, network and zone diagrams, and roadmap inputs, at a quality level requiring editorial review rather than substantive rewriting.
 * Maintain the Document Request List (DRL) : track requested artifacts, follow up with client counterparts, and keep status current for the workstream lead.
 * Support pre-readout preparation : assemble validated findings, check figures and diagrams for accuracy, and incorporate review feedback across iterations.
 * Identify risks and gaps through the project's RAID process and weekly status reporting, documenting blockers, open items, and missing data in advance of schedule impact.
 * Contribute to practice IP : improve walkdown and discovery templates, data-collection tooling, diagram libraries, and other reusable artifacts that improve delivery efficiency on subsequent engagements.

Typical Deliverables

The engagement's defining output is a client-ready set of OT security deliverables. Your contribution is the current-state foundation of that set: the evidence, the analysis, and the drafted sections that a Sr. or Lead Consultant develops into architecture and roadmap. Accuracy is a primary performance criterion for this role, because a plan based on an inaccurate asset inventory or a misread network diagram will fail during implementation, frequently well after the deliverable has been accepted.

You contribute to the following deliverable set, typically as a drafting author on the current-state and analysis sections:

 * Current-State OT Discovery & Asset Baseline: primary drafting contributor for the asset inventory, network architecture and dataflow documentation, protocol and communication baseline, remote access path inventory, and lifecycle and patch posture across in-scope sites.
 * OT Cybersecurity Gap & Risk Assessment: contributor for gap tables, control mapping, and the supporting evidence behind each finding.
 * Zone & Conduit Architecture and Segmentation Design: supporting contributor for current-state zone and conduit diagrams and validation of the assumptions the target-state design rests on.
 * OT Secure Remote Access & Monitoring Design: supporting contributor for remote access inventories and monitoring coverage data.
 * Executive Findings & Recommendations: supporting contributor for figures, diagrams, and fact-checking of every finding presented to client leadership.

Growth & Development

 * Build depth across the major control system platform families, industrial protocols, and networking fundamentals through project work, certifications, partner training, and lab work.
 * Seek and apply feedback from Sr. and Lead Consultants. Demonstrate consistent growth in delivery independence, written quality, and technical breadth.
 * Maintain working currency in AI security as the field develops, including the evolution of AI risk frameworks, the security implications of agentic and tool-calling systems, and the controls available to govern them; AI competence is expected of every consultant in the practice, independent of specialization.
 * Grow toward independently owning a defined workstream, which is the threshold for the Sr. Consultant level., Beyond technical delivery, this role is expected to demonstrate the following in front of clients and within the WWT team:
 * Safety first : treat client site safety rules as non-negotiable, and never allow a security objective to override an operational or safety constraint.
 * Ownership and accountability : take responsibility for the accuracy of every artifact you produce, and follow through on commitments without being chased.
 * Credibility : come prepared, develop a thorough working knowledge of the environment being documented, and establish yourself as a reliable source of technical detail for client staff.
 * Clear communication : report status, blockers, and data gaps promptly and plainly, in advance of any schedule impact.
 * Integrity : report what the evidence shows, including when it contradicts the client's documentation or the team's working assumption.