Director of Operational Technology

Canopy A&D•Irvine, CA

3d•$175,000 - $195,000•Onsite

About The Position

Canopy Aerospace & Defense is seeking a hands-on Director of Operational Technology to serve as second-in-command to the CIO and to own day-to-day manufacturing technology and IT operations from our Irvine, California facility. The OT environment is the center of gravity for this role: the machine-tool network, the controllers and inspection systems attached to it, and the segmentation and controls that keep that environment both running and compliant. The successful candidate will be on the production floor and in the network room weekly — troubleshooting a controller segment, validating a restore, closing a control gap — while leading a team, managing vendors, owning a budget, and standing behind the environment during customer and third-party assessments. Uptime on the shop floor and demonstrable compliance are the same problem here, and this role owns both.

Requirements

Minimum 10 years in information or operational technology, including at least 4 years leading a team with direct-report and budget accountability.
Minimum 5 years supporting discrete manufacturing; aerospace, defense, or another regulated manufacturing sector required.
Demonstrated hands-on experience with OT / industrial control environments — machine-tool networks, PLC/HMI/SCADA, or shop-floor data collection. Governance-only OT exposure will not be competitive.
Direct experience implementing and sustaining NIST SP 800-171 controls, and participation in at least one CMMC readiness effort, DIBCAC assessment, or equivalent third-party assessment of a defense environment.
Working knowledge of DFARS 252.204-7012, SPRS scoring, CUI handling, and ITAR-controlled technical data in an IT/OT context.
Ownership of ERP operations in manufacturing (Epicor or similar) and of ERP/MES/PLM integrations; core Microsoft and enterprise networking depth.
Bachelor’s degree in IT, Computer Science, Engineering, or a related field, or equivalent additional directly relevant experience.
U.S. Person requirement. Must be a U.S. Person as defined at 8 U.S.C. § 1324b(a)(3) and 22 C.F.R. § 120.62, and able to pass a background investigation.
On-site in Irvine five days per week; after-hours and weekend support required.
Professional working proficiency reading, writing, and speaking English
Ability to work in office, lab, and manufacturing environments with occasional exposure to noise, chemicals, dust, industrial equipment, and temperature variations
Ability to sit or stand for extended periods while working at a computer workstation
Frequent use of hands and fingers for data entry, keyboarding, and mouse use
Ability to view computer screens for prolonged periods
Ability to communicate effectively in person, by phone, and via email
Ability to use a computer to complete assignments
Willingness to work long hours and weekends when needed to meet critical deadlines
Willingness to travel to other Canopy A&D sites as needed

Nice To Haves

Active or eligible U.S. Government security clearance (Secret or higher).
Experience with IEC 62443, NIST SP 800-82, and Purdue/ISA-95 architecture applied to a live plant; OT-aware monitoring and asset discovery.
Experience in Microsoft GCC High / Azure Government, and with a segmented CUI enclave that includes OT assets in scope.
Multi-site or multi-entity manufacturing group experience; AS9100 and NADCAP familiarity; certifications such as GICSP, GRID, CISSP, CISM, CCNP, or CMMC RP/CCP.

Responsibilities

Own the manufacturing network and every device on it: CNC and multi-axis machining centers, CMMs and metrology, thermal processing and coating equipment controls, PLCs, HMIs, SCADA and historian systems, test cells, and shop-floor data collection.
Maintain an accurate, continuously updated OT asset inventory — controller model, OS and firmware version, network address, criticality, owner, and patch or compensating-control status.
Design and enforce segmentation between enterprise and plant-floor zones using a defensible zone-and-conduit model (Purdue / ISA-95, IEC 62443, NIST SP 800-82). Own the industrial DMZ and control every conduit that crosses it.
Manage legacy and ‘unpatchable’ machine controllers through isolation, allowlisting, media control, jump-host access, monitoring, and documented compensating controls that survive assessor scrutiny.
Own secure, controlled transfer of NC code, program files, and inspection data between engineering, ERP/PLM, and the shop floor — including removable-media policy and its technical enforcement.
Set network, security, and remote-access requirements for new equipment at the purchase-specification stage, in partnership with Manufacturing Engineering, Quality, and Facilities. Vendor remote access is a decision this role owns, not a concession made at installation.
Own OT business continuity: controller images, post-processor and parameter backups, tested restores, and documented recovery objectives for production-critical systems.
Own day-to-day IT service delivery for multiple sites — incidents, requests, change and problem management — and serve as senior escalation and, when needed, the person who does the work.
Maintain up-time for systems that stop the line: ERP/MES, DNC and machine-tool file transfer, shop-floor data collection, quality and inspection systems, labeling and travelers, time and attendance.
Own core infrastructure and its lifecycle: Windows Server and Active Directory, Microsoft 365 / Entra ID, virtualization, enterprise networking, storage, backup and disaster recovery, and endpoint management.
Support the environments behind ERP, CAD/CAM, PLM, simulation, and metrology, including license servers, high-performance workstations, and large-file storage performance.
Continue to maintain and sustain compliance across CMMC, ITAR, and SOC 2 for both IT and OT scope — not a one-time certification push, but ongoing operation of the control set, evidence generation, and audit readiness as a standing condition of the environment.
Sustain NIST SP 800-171 / CMMC Level 2 technical controls across the CUI enclave including in-scope OT assets; own SSP contributions, POA&M closure, SPRS scoring inputs, annual affirmation support, and boundary scoping decisions defensible to a C3PAO, DIBCAC, or a prime’s supply-chain security team.
Enforce ITAR and EAR technical-data controls in the technology environment: U.S. Person access restriction, data residency and tenancy controls, controlled sharing with customers and suppliers, and auditable access records.
Support SOC 2 examinations and AS9100 surveillance by operating controls continuously and producing evidence on demand rather than assembling it retroactively.
Lead technical incident response for the site — containment, eradication, recovery, forensic preservation, and the 72-hour DoD reporting workflow under DFARS 252.204-7012 — with the CIO, Legal, and the Facility Security Officer.
Lead, coach, staff, and hold accountable the site IT/OT team; act as the CIO’s deputy to site leadership, Operations, Engineering, Quality, and Finance.
Manage MSP, VAR, and equipment-vendor relationships including service levels, security flow-downs, and performance escalation; own the site operating and capital technology budget.