Network Security Architect
Core
Designing, implementing, and governing secure, resilient, and scalable OT network architectures across industrial/manufacturing environments, including IT/OT convergence and Zero Trust adoption.
Role type
Senior Network Security Architect (OT/IT)
Builds
Secure OT network architectures, reference architectures standards, HLD/LLD, network diagrams, IP addressing schemes, routing and firewall policies.
Domain
Industrial/Manufacturing (OT) + Cloud Networking (AWS)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Layer 2/3 Networking (VLANs, STP, BGP, OSPF, VRF), Firewall Architecture (Cisco ASA/FTD/FMC, DMZ, segmentation), Zero Trust (ZPA/ZIA, Cisco ZTA), AWS Cloud Networking (VPC, EC2, Transit Gateway, Direct Connect), Enterprise proxy solutions, Standards awareness (IEC 62443, NIST CSF, ISO 27001, Purdue Model)
Preferred skills
CCNP/CCIE, AWS Advanced Networking, CISSP, Azure/GCP networking, Infrastructure as Code (Terraform, CloudFormation, Ansible), OT/SCADA exposure
Technologies
Juniper, Cisco, AWS (VPC, EC2, Transit Gateway, Direct Connect), Zscaler, Cisco ZTA, Cisco ASA/FTD/FMC, Palo Alto VM-Series, FortiGate, Cisco CSR 1000V, VyOS, Squid, HAProxy, NGINX, F5
Responsibilities
Represent OT network architecture with security and compliance; Define reference architectures standards and design frameworks; Develop HLD/LLD, network diagrams, IP addressing schemes, routing and firewall policies; Lead Zero Trust adoption for OT environments; Drive architecture for multi-site, multi-region deployments; Define resiliency, redundancy, and failover strategies; Lead architecture reviews with Product, Cybersecurity, and Compliance; Influence vendor selection, technology standards, and long-term roadmaps; Work with cybersecurity teams on IDS/IPS, network monitoring, NAC, vulnerability management, and secure remote access; Coordinate with enterprise IT Network teams for IT/OT convergence and secure remote access.
Seniority
Senior, hands-on IC with leadership and mentorship