Staff Cybersecurity Architect - OT

Wabtec•Erie, PA

4d•$104,800 - $149,300•Hybrid

About The Position

The OT Security Architect helps define and implement the cybersecurity strategy, architecture, and controls that protect Operational Technology (OT), Industrial Control Systems (ICS), SCADA, and Industrial IoT (IIoT) environments. This role works with plant operations, engineering, infrastructure, cybersecurity, and third-party vendors to secure industrial systems and align them with business, safety, reliability, and regulatory requirements. The OT Security Architect provides technical leadership for OT security architecture, site assessments, monitoring, incident response, and cybersecurity improvement initiatives across global operational sites.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related fields. Equivalent experience will be considered.
5+ years of cybersecurity, IT, or engineering experience.
Experience conducting OT cybersecurity assessments and architecture reviews.
Experience supporting or leading OT cybersecurity incident response.
Strong understanding of industrial control systems and OT networking.
Hands-on experience with OT security monitoring and detection tools.
Knowledge of OT threats, attack techniques, and industrial risk management.
Strong writing, presentation, relationship building, and communication skills.

Nice To Haves

Preference given for candidates with exposure to manufacturing/industrial environments + those with OT/ICS cybersecurity experience
Experience with OT monitoring platforms such as Nozomi, Claroty, Dragos, Armis, Microsoft Defender for IoT, or similar tools.
Knowledge of industrial protocols including Modbus, DNP3, OPC-UA, PROFINET, EtherNet/IP, BACnet, and IEC 61850.
Experience with firewalls, network segmentation, IDS/IPS, secure remote access, and industrial DMZ architectures.
Ability to utilize scripting and automation for process improvements
Experience working in manufacturing, rail, transportation, or critical infrastructure environments
Experience conducting cyber tabletop exercises and recovery testing.
GICSP (GIAC Global Industrial Cyber Security Professional)
GRID (GIAC Response and Industrial Defense)
CISSP
ISA/IEC 62443 Cybersecurity Certification
CISM
CISA

Responsibilities

Develop and maintain enterprise OT cybersecurity architecture standards, reference architectures, diagrams, and technical guidance aligned with ISA/IEC 62443, NIST 800-82, NIST CSF, and industry best practices.
Design secure OT network architectures, including segmentation strategies, Purdue Model implementation, industrial DMZs, remote access controls, and zero trust principles.
Review and approve OT system designs, modernization projects, and digital transformation initiatives.
Conduct OT/ICS cybersecurity assessments, including risk assessments, architecture reviews, threat modeling, and maturity evaluations.
Identify architectural and program security gaps and develop remediation roadmaps with site leadership and engineering teams.
Lead deployment and optimization of OT monitoring, asset discovery, and industrial threat detection platforms.
Develop OT-specific use cases, dashboards, alerting strategies, and detection content.
Support investigation, containment, eradication, and recovery for OT cyber events coordinated with security operations teams.
Develop OT-specific incident response playbooks and recovery procedures.
Participate in tabletop exercises, cyber simulations, and resilience testing.
Lead OT vulnerability identification, prioritization, and remediation activities.
Assess security impacts of patches and mitigations in operational environments.
Balance cybersecurity needs with operational availability and safety.
Track and report OT vulnerability and remediation metrics to security leadership.
Develop relationships and partner with audit, risk, engineering, and operations teams to demonstrate program effectiveness and support compliance.
Provide OT cybersecurity subject matter expertise, technical leadership, and mentorship.
Support vendor evaluations, system integrations, and cybersecurity requirements for new projects.
Communicate OT cybersecurity risks, architecture decisions, and strategic recommendations to executive and business stakeholders.