OT Architect

NCC Group•Rayne Township, PA

3d•Hybrid

About The Position

NCC Group is seeking an experienced OT Cybersecurity Architect to join their growing global OT practice. The role involves designing secure and resilient architectures for critical national infrastructure clients in sectors such as energy, water, manufacturing, and rail. This is an architecture-led position with significant hands-on delivery, encompassing OT cybersecurity architecture from discovery and requirements through design, assurance, implementation support, and acceptance. The architect will lead client workshops, make design decisions, and ensure technical detail is validated. Active SC clearance is essential, and the role requires an ASAP start.

Requirements

Demonstrable experience designing and assuring OT/ICS security architectures in live operational environments.
Strong knowledge of OT architecture patterns, segmentation, zones and conduits, secure remote access, identity and access models, and traffic flow analysis.
Hands-on technical depth across firewalls, switching, routing, virtualisation and security platforms in OT or converged IT/OT environments.
Experience taking architecture from concept through detailed design, implementation support and acceptance.
Working knowledge of IEC 62443, including security levels, foundational requirements and defence-in-depth.
Understanding of OT constraints, including availability, safety, legacy systems and restricted change windows.
Experience in rail, automotive, renewables, manufacturing or comparable OT environments.
Active SC clearance is essential.

Nice To Haves

OT technologies and protocols, including HMI, PLC, RTU, DCS, SCADA, IEC 61850, DNP3 and Modbus/TCP.
NIST SP 800-82, NIST 800-53, CIS or STIG standards.
Vendor evaluation, procurement support, zero-trust principles or software-defined segmentation in OT.
Relevant certifications such as IEC 62443 Cybersecurity Expert, GICSP, GRID or equivalent.

Responsibilities

Own current-state, transition and target-state OT security architecture workstreams.
Lead architecture discovery, requirements and design workshops with OT engineers, IT teams, vendors and technology stakeholders.
Design network segmentation, zones and conduits, IT/OT boundaries, secure remote access and access control models.
Produce clear, auditable architecture artefacts, including principles, requirements, HLDs, LLDs, network diagrams, data flows, firewall rule specifications and bills of materials.
Assess technology options and translate operational, safety and security needs into pragmatic design decisions.
Provide hands-on technical assurance during implementation, testing and acceptance.
Contribute to practice development, reusable methodologies, proposals and the development of junior colleagues.

Benefits

Flexible Working options
25 days of holiday, plus bank holidays
Option to buy up to 5 additional days of annual leave
Pension
Life Assurance
Share Save Scheme
Community & Volunteering Programmes
Special Time Off for life events (marriage/civil partnership, becoming a grandparent, welcoming a new pet)
Generous maternity and paternity leave
Time off and support for fertility treatments