IT Senior Architect, Security, Operational Technology (Hybrid)

Eversource Energy • Westwood, MA

8d • Hybrid

About The Position

The Senior IT Security Architect for Operational Technology (Senior ITSA-OT) will work with other areas within IT to support OT business units and various technology areas to ensure the Confidentiality, Integrity and Availability to Eversource systems. The ITSA will partner with Eversource project teams, Eversource Business Groups, and the IT Security team to ensure appropriate and effective security controls are in place when implementing new Eversource initiatives and when updating existing systems. The IT Security team uses the Eversource Risk Assessment process to evaluate all projects against Eversource standards to mitigate risk levels to an acceptable level. New security controls and standards are established as part of this process.

Requirements

• Knowledge across many of these areas: OT and SCADA, Identity and Access Management, End Point Encryption, Encryption Key Management, Database Security, Enterprise Directory Services, IDS, IPS, Firewalls, Cloud SaaS /PaaS/IaaS Security, Dragos, Industrial Defender, SIEM or related information security subject area.
• Requires strong IT technology knowledge.
• Requires strong Security Technology knowledge.
• Must have extensive experience with infrastructure and technology (cloud and on premise), security designs and requirements, and Security goals and objectives.
• Proven experience assessing Disaster recovery solutions and resiliency hosting platforms for business solutions.
• Proven experience with designing Data access and protection models, including defense in depth.
• Proven experience with encryption solutions for data in motion and at rest
• Experience with architecture frameworks, processes such as TOGAF and ITIL processes such as Release, Change, Capacity, and Availability preferred
• Requires strong interpersonal, communications and presentation skills.
• Bachelor’s degree in Engineering, Computer Science, related discipline, or equivalent experience
• Minimum of ten (10) years of business and technical experience with at least 2 years in senior level roles related to broad or multiple areas of application, technology, security or infrastructure architecture
• Experience with security concerns within OT and SCADA architecture.
• Strong working knowledge of information systems security standards and practices.
• Knowledge of NIST 800-82, NIST 800-171.
• Experience in securing Industrial Control Systems, and NERC/CIP regulatory requirements.

Nice To Haves

• Application Portfolio Management, Technology Portfolio Management is a plus.
• Knowledge of Electric and Gas utility industry a plus.
• Experience with ISA/IEC 62443 standard is a plus.
• CISSP preferred

Responsibilities

• Participate in projects and design discussions to ensure a secure solution. Translate these needs into security requirements.
• Provide security recommendations and functional requirements to internal business groups.
• Coordinate and resolve complex technical security problems and challenges.
• Anticipates and prepares for emerging business, application and infrastructure needs, and translates these needs into security requirements.
• Runs and manages research and technology evaluation projects as needed to support CIP goals.
• Apply laws, regulations, industry standards, and ethical requirements related to information security and privacy, particularly in the OT/SCADA space.
• Recommend effective process changes to enhance Eversource Security Posture.
• Evaluate, test and select security tools and products.
• Produce high quality oral and written work, presenting complex technical matters clearly and concisely with audiences ranging from peers to Sr. Management.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees