Principal Architect (Manufacturing Security, Remote)

Job summary

This role is responsible for defining and managing the enterprise operational technology (OT) security architecture for a global manufacturing portfolio. The position involves setting technical directions for network segmentation, IT/OT boundary design, and secure remote access across multiple operating companies and sites worldwide.

Qualifications

• Extensive knowledge of OT/ICS network architecture, including Purdue Model/ISA-95 zone segmentation and industrial DMZ design.
• Proven experience in designing network segmentation implementations in complex, multi-site OT environments, particularly in regulated industries like life sciences or pharmaceuticals.
• Strong understanding of OT-specific cybersecurity frameworks such as IEC 62443 and NIST SP 800-82.
• Familiarity with zero-trust network access (ZTNA) and secure access service edge (SASE) architectures.
• 12+ years of experience in OT/ICS security or industrial cybersecurity, with at least 5 years in a senior architect role.

Responsibilities

• Develop and maintain the enterprise OT security architecture blueprint for the global manufacturing portfolio.
• Lead the design and implementation of secure remote access architecture, transitioning from legacy systems to modern solutions.
• Collaborate with security leadership to create OT cybersecurity policies and governance standards.
• Oversee the Architecture Review Board process for OT security capabilities and ensure compliance with architectural standards.
• Provide expert advisory services to site IT leads and plant engineers regarding OT security.

Skills

• Expertise in firewall policies for OT protocols and secure remote access architecture.
• Experience with industrial micro-segmentation and OT visibility platforms.
• Ability to present complex technical decisions to executive-level audiences.

Education

• A degree in a relevant field is preferred, although specific educational requirements are not detailed.

Tools

• Familiarity with industrial cybersecurity tools and platforms such as Zscaler, Elisity, Claroty, and others is advantageous.