Senior / Principal Security Architect (OT)

Xcel Energy•Minneapolis, MN

1d•$130,000 - $183,200•Hybrid

About The Position

The Security Architect ensures that Xcel Energy’s technology services are designed and delivered securely across Information Technology (IT) and Operational Technology (OT) environments. The role focuses on industrial and critical infrastructure facilities, including electric substations, gas compressor stations, and generation sites. The architect partners with operations and engineering teams to develop practical security approaches that protect reliability and safety while enabling business outcomes. The successful candidate brings hands-on experience in areas such as controls engineering, field operations, or industrial control system (ICS) design or operations, together with strong security architecture skills. The role advises stakeholders on security methods and practices, promotes best practices and standards to reduce risk across Xcel Energy, and collaborates with security, technology, and business teams. The position defines security patterns and reference architectures for industrial control environments; governs OT network segmentation, secure remote access, and monitoring; develops OT security baselines and standards; collaborates with operations teams on security improvements; strengthens OT incident readiness; creates reusable security documentation; and supports compliance with applicable regulations, including NERC CIP and TSA Security Directive 2. The posting provides separate minimum qualifications and compensation ranges for Senior and Principal Security Architect levels. The anticipated starting base pay is $130,000 to $183,200 per year. Xcel Energy supports a hybrid work model; many roles are expected onsite three days per week, Tuesday through Thursday, but expectations vary by role, team, and business needs.

Requirements

Senior level: At least 8 years of IT experience, including 5 years of direct IT engineering and cybersecurity experience.
Senior level: Demonstrated verbal, written, and presentation skills.
Senior level: Experience collaborating with internal stakeholders, third parties, and management.
Senior level: Ability to influence without direct authority.
Principal level: 5 years of experience in systems architecture or systems engineering.
Principal level: 10 years of experience in information security.
Principal level: 3 years of experience designing complex systems.
Principal level: 3 years of experience with systems integration and engineering.
Principal level: Strong oral and written communication skills.
Principal level: Ability to understand and respond to clients’ business needs.
Principal level: Demonstrated experience collaborating with internal employees, third parties, and management to develop solutions and ensure stakeholder buy-in.
Principal level: Ability to influence without direct authority.
Hands-on experience in roles such as controls engineering, field technician or field operations, or ICS design or operations.
Demonstrated experience with technology implementation projects for enterprise-scale organizations is listed as a Senior minimum requirement.

Nice To Haves

Information security experience in the electric utility industry.
Experience with technology implementation projects for enterprise-scale organizations (listed as preferred for the Principal level).
At least 5 years of experience in security architecture, cybersecurity engineering, or control systems engineering, including work interfacing with industrial or OT environments.
Hands-on experience with OT/ICS technologies and environments such as SCADA, PLC/HMI, and DCS, and with critical-infrastructure operational constraints.
Knowledge of network segmentation concepts and secure remote access patterns for OT and vendor connectivity.
Experience with OT security frameworks and guidance such as IEC 62443 and NIST SP 800-82, applied pragmatically in operating environments.
Experience working with vendors or contractors supporting industrial equipment and control systems, including secure access and support models.
Certifications such as GICSP, CISSP, CCSP, CCSK, or AWS Certified Security.
Knowledge of relevant regulations and compliance requirements such as NERC CIP, TSA, and 10 CFR 810.

Responsibilities

Work with the business to define security patterns and reference architectures for industrial control environments such as SCADA, DCS, and PLC/HMI.
Define and govern OT network segmentation, including zones and conduits, secure remote access, and monitoring strategies for OT networks and vendor or contractor connectivity.
Develop security control baselines, hardening standards, and exception processes for OT assets and supporting infrastructure, and ensure compliance drift is managed.
Partner with controls engineering, field technicians, plant operations, and maintenance teams to implement security improvements suited to real-world operating environments.
Improve detection and response for OT environments, including logging and telemetry requirements, playbooks, and tabletop exercises with operations.
Create reusable security products, such as use cases and implementation patterns.
Ensure adherence to regulatory frameworks such as NERC CIP and TSA Security Directive 2, including applicability to OT facilities and supporting IT or cloud services where used.