Happiest Minds Technologies - OT Security Architect

About the Role :

The candidate should ideally come from a leading IT consulting, technology consulting, cybersecurity consulting, or systems integration organization and have experience working with enterprise and industrial clients on large-scale OT security initiatives.

Key Responsibilities :

- Design and define OT cybersecurity architectures covering industrial control systems, SCADA, PLC, DCS, HMI, engineering workstations, historians, and OT network environments.

- Develop secure OT network architectures incorporating segmentation, zoning, conduits, firewalls, secure remote access, jump servers, monitoring, and controlled IT/OT connectivity.

- Conduct OT security assessments, architecture reviews, threat modelling, risk assessments, and gap assessments across manufacturing, energy, utilities, oil & gas, transportation, or other critical infrastructure environments.

- Define security controls and reference architectures aligned with industry standards and frameworks such as IEC 62443, NIST Cybersecurity Framework, NIST SP 800-82, ISO 27001, and relevant regulatory requirements.

- Work with enterprise architects, infrastructure teams, SOC teams, network/security engineers, plant operations, engineering teams, and business stakeholders to integrate cybersecurity controls into OT environments.

- Design OT security monitoring and detection capabilities, including integration with SIEM, IDS/IPS, network monitoring, endpoint security, vulnerability management, and threat intelligence platforms.

- Develop security architecture standards, patterns, policies, guidelines, and technology roadmaps for OT environments.

- Evaluate cybersecurity technologies and vendors for OT security use cases and provide architecture recommendations based on business and technical requirements.

- Lead OT security transformation and implementation programs from architecture and design through deployment and operational handover.

- Identify vulnerabilities and security risks within OT environments and recommend appropriate compensating controls without disrupting critical industrial operations.

- Support incident response and cyber-resilience planning for OT environments, including containment, recovery, business continuity, and disaster recovery considerations.

- Engage directly with client stakeholders and provide cybersecurity consulting, architecture recommendations, presentations, workshops, and executive-level communication.

Required Technical Skills :

- Strong experience in OT/ICS cybersecurity architecture and industrial environments.

- Hands-on understanding of SCADA, PLC, DCS, HMI, historians, RTUs, engineering workstations, and industrial communication protocols.

- Strong knowledge of IT/OT network architecture, network segmentation, firewalls, secure remote access, DMZ, NAC, IDS/IPS, and zero-trust principles.

- Experience with OT security monitoring, vulnerability management, threat detection, and incident response.

- Knowledge of IEC 62443, NIST SP 800-82, NIST CSF, ISO 27001, and OT cybersecurity best practices.

- Understanding of industrial protocols such as Modbus, DNP3, OPC/OPC-UA, Profinet, Ethernet/IP, and related protocols.

- Exposure to OT security technologies such as Claroty, Nozomi Networks, Dragos, Armis, Fortinet, Palo Alto Networks, or equivalent platforms is preferred.

- Strong understanding of enterprise security architecture and integration between IT and OT environments.

- Experience in developing architecture documents, HLD/LLD, security frameworks, technical standards, and technology roadmaps.

Consulting & Client-Facing Experience :

- Candidates should preferably have experience with IT consulting, technology consulting, cybersecurity consulting, or systems integration organizations.

- Experience working with multiple enterprise clients and delivering consulting engagements, security assessments, architecture reviews, and transformation programs is highly desirable.

- Strong stakeholder management, presentation, documentation, and consulting skills are essential.

- Experience managing workshops with CIO, CISO, CTO, plant leadership, infrastructure, engineering, and cybersecurity stakeholders will be an advantage.

Education & Certifications :

- Certifications such as CISSP, CISM, IEC 62443, GICSP, GRID, or relevant OT/ICS security certifications are preferred.