OT Cybersecurity Architect (ICS / Mfg Security)

BCTG’s direct manufacturing client is seeking a Senior OT Cybersecurity Architect to provide technical leadership and architectural guidance for a global Operational Technology (OT) cybersecurity program.

This role will define OT security strategies, standards, and technical solutions across manufacturing environments while partnering closely with OT Security Engineers, cybersecurity teams, manufacturing sites, controls engineers, and operational stakeholders.

The ideal candidate will have deep experience designing cybersecurity solutions for industrial environments and the ability to translate security requirements into practical solutions that protect manufacturing operations while maintaining production reliability and uptime.

This individual will provide architectural direction for OT security initiatives including endpoint protection, vulnerability management, asset visibility, network security, patching strategies, and security governance.

Key Responsibilities

OT Cybersecurity Architecture & Strategy

• Define and implement OT cybersecurity architecture strategies across global manufacturing environments.
• Develop security standards, technical guidelines, and reference architectures for OT environments.
• Provide architectural oversight for OT security initiatives and ensure solutions align with business and operational requirements.
• Evaluate current OT environments and recommend security improvements.
• Translate cybersecurity requirements into practical solutions that support manufacturing operations.

OT Security Solution Design

Provide technical leadership and architectural guidance for initiatives including:

• OT endpoint security deployments.
• Security agent implementation across industrial assets.
• OT asset discovery and inventory validation.
• Vulnerability management and remediation strategies.
• Patch management approaches for industrial systems.
• Security monitoring and visibility solutions.
• Network segmentation and secure communication strategies.
• Security controls for industrial devices including:
• Industrial PCs (IPCs)
• HMIs
• PLCs
• SCADA systems
• Industrial automation systems

Manufacturing & Industrial Security Leadership

• Partner with OT Security Engineers, Controls Engineers, Plant Engineering teams, and manufacturing stakeholders to ensure security solutions are operationally feasible.
• Understand manufacturing constraints including 24x7 operations, production uptime requirements, maintenance windows, and change limitations.
• Provide guidance on deploying security solutions without disrupting manufacturing processes.
• Support technical reviews, architecture discussions, and security design decisions.

OT Security Engineering Support

• Provide technical direction and mentorship to OT Security Engineers.
• Review deployment strategies and technical approaches.
• Guide troubleshooting and remediation activities.
• Assist with defining rollback procedures and recovery strategies.
• Provide technical recommendations for security exceptions and compensating controls.

Risk Management & Governance

• Support OT cybersecurity risk assessments and remediation planning.
• Define security controls and mitigation strategies.
• Develop and maintain OT security standards and governance models.
• Support compliance with industry frameworks and best practices.
• Participate in security reviews and technical assessments.

Documentation & Standards

• Develop and maintain:
• OT security architecture documentation.
• Technical standards.
• Security guidelines.
• Reference designs.
• Risk documentation.
• Implementation recommendations.

Required Qualifications

• 8+ years of cybersecurity experience with significant Operational Technology (OT) / Industrial Control Systems (ICS) experience.
• Proven experience designing cybersecurity solutions for manufacturing or industrial environments.
• Strong understanding of OT security architecture, standards, and implementation.
• Experience working with:
• Industrial Control Systems (ICS)
• SCADA environments
• PLCs
• HMIs
• Industrial networks
• Manufacturing automation systems
• Experience designing OT security solutions including:
• Endpoint security
• Vulnerability management
• Asset visibility
• Network segmentation
• Security monitoring
• Patch management strategies
• Ability to work effectively with technical teams, plant personnel, and business stakeholders.
• Strong communication skills with the ability to explain complex security concepts to both technical and non-technical audiences.

Preferred Qualifications

• Experience supporting global manufacturing environments.
• Experience in regulated industries such as:
• Pharmaceutical
• Life sciences
• Medical device
• Food and beverage
• Industrial manufacturing
• Experience with OT security technologies such as:
• CrowdStrike Falcon
• Claroty
• Tenable
• Cortex XDR
• Microsoft Defender for Endpoint
• Industrial security monitoring platforms
• Experience with:
• IEC 62443
• NIST Cybersecurity Framework
• Purdue Model
• Zero Trust concepts
• Industrial network segmentation
• Experience with OT asset inventory and discovery programs.
• Security certifications preferred:
• CISSP
• CISM
• GIAC
• ISA/IEC 62443 certifications

Ideal Background

The ideal candidate is a senior OT cybersecurity leader who understands both security architecture and manufacturing operations. They have experience designing secure industrial environments and can provide technical leadership across complex OT security initiatives.

This person understands the challenges of securing manufacturing systems while maintaining production uptime and can effectively partner with engineers, architects, plant teams, and cybersecurity leadership to implement practical security solutions.

Work Environment

• Remote with occasional travel to manufacturing sites as needed.
• Ability to collaborate with global teams and manufacturing locations.