Architect - OT Security (Network Security)

About Position:
We are seeking an experienced OT Security Architect with strong expertise in Operational Technology (OT), Industrial Control Systems (ICS), and Network Security to lead the design and implementation of secure, resilient, and compliant IT/OT/Cloud security architectures. The ideal candidate will play a critical role in protecting business-critical operational environments by implementing Zero Trust principles, securing industrial networks, and ensuring compliance with industry standards such as IEC 62443, NERC CIP, NIST, and ISO 27017. This role requires deep technical expertise, architecture leadership, stakeholder engagement, and hands-on experience in securing complex OT environments across energy, utilities, industrial automation, and cloud-connected operational platforms.
Role: Architect - OT Security (Network Security)
Location: All Persistent Locations
Experience: 10 to 15 Years
Job Type: Full Time Employment
What You'll Do:
Design and govern secure IT, OT, and cloud-connected network architectures aligned with industry security standards and operational requirements.
Develop and implement defense-in-depth security strategies for OT and ICS environments.
Define network segmentation, VLANs, DMZ architectures, routing, switching, VPNs, and secure remote access controls.
Lead Zero Trust security initiatives including ZTNA, MFA, PAM, and identity-based access control implementation.
Architect secure data flows between industrial systems, enterprise networks, cloud platforms, and remote operational environments.
Design and implement secure cloud-connected OT architectures leveraging AWS security services and controls.
Establish architecture guardrails, security standards, hardening baselines, and implementation best practices.
Conduct threat modeling, security assessments, risk reviews, and vulnerability management activities.
Support compliance assessments against IEC 62443, NERC CIP, NIST, ISO 27017, CRA, and customer-specific requirements.
Design and review industrial firewall, gateway, IDS/IPS, and network security solutions.
Lead troubleshooting and root-cause analysis for network security, segmentation, VPN, firewall, DNS, routing, and access-related issues.
Secure and assess industrial communication protocols such as Modbus TCP, DNP3, OPC UA, and MQTT.
Drive SIEM integration, monitoring, alert investigation, incident response, and security operations readiness.
Collaborate with engineering, infrastructure, operations, cybersecurity, and business stakeholders.
Provide technical leadership, mentoring, architecture governance, and customer-facing security consulting.
Present security risks, mitigation plans, and architectural recommendations to leadership and clients.
Expertise You'll Bring:
10 to 15 years of experience in Cybersecurity, Network Security, OT Security, or Security Architecture roles.
Strong expertise in OT/ICS security architecture and industrial network security design.
Extensive experience implementing IEC 62443 security frameworks and defense-in-depth architectures.
Deep understanding of Purdue Model architecture and OT zone/conduit segmentation principles.
Hands-on experience with network technologies including VLANs, routing, switching, segmentation, VPNs, and DMZ architectures.
Strong knowledge of Zero Trust Architecture, ZTNA, MFA, PAM, identity governance, and access security controls.
Experience with industrial firewall and gateway solutions including Palo Alto, Fortinet, Cisco, and Siemens Scalance.
Expertise in IDS/IPS, SIEM integration, network monitoring, asset inventory, vulnerability management, and security operations.
Strong knowledge of AWS security services including VPC, Security Groups, NACLs, WAF, private connectivity, logging, and monitoring.
Experience designing and securing cloud-connected OT and Industrial IoT environments.
Knowledge of industrial communication protocols including Modbus TCP, DNP3, OPC UA, and MQTT.
Experience conducting security assessments, risk analysis, compliance reviews, and remediation planning.
Strong troubleshooting and debugging capabilities across OT, IT, cloud, and hybrid environments.
Experience supporting critical infrastructure, energy, utilities, renewable energy, SCADA, and industrial automation environments.
Strong stakeholder management, communication, consulting, and leadership skills.
Ability to lead architecture reviews, security governance initiatives, and strategic transformation programs.
Benefits:
Competitive salary and benefits package
Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
Opportunity to work with cutting-edge technologies
Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
Annual health check-ups
Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents
Values-Driven, People-Centric & Inclusive Work Environment:
Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.
We support hybrid work and flexible hours to fit diverse lifestyles.
Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment
Let's unleash your full potential at Persistent - persistent.com/careers
"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."

Work arrangement
No