OT Security Architect

A senior, forward-thinkingExperiencia, cualificaciones y habilidades interpersonales, ¿tiene todo lo necesario para triunfar en esta oportunidad? Descúbralo a continuación.OT Security Architectwith deep technical roots in industrial cybersecurity and a strong system-level mindset. This role goes beyond implementation and focuses ondesigning, governing, and evolving secure OT architecturesacross complex industrial environments. The OT Security Architect understands legacy constraints, production realities, and business drivers, and translates them intoscalable, secure, and operable architectures . They act as atechnical authorityfor OT security, bridging engineering, IT, operations, and pre-sales teams.Core ResponsibilitiesOT Security Architecture & DesignDesign end-to-end OT security architectures, including:Network segmentation and zoning (aligned with Purdue / IEC 62443)Secure connectivity between OT, IT, DMZ, and external systemsFirewall placement, rule strategy, and defense-in-depth conceptsDefine network topologies for industrial environments:VLANs, IP addressing / re-numbering strategiesInter-zone communication paths and trust boundariesDesign secure infrastructure layouts, including:OT servers, virtual machines, and platform separationConnectivity between applications, historians, MES, SCADA, and cloud/remote access solutionsProduce architecture diagrams, technical designs, and solution blueprints suitable for:Customer validationInternal delivery teamsAudits and long-term maintainabilityTechnical Governance & StandardsDefine OT security reference architectures, patterns, and best practicesEnsure architectural alignment with:IEC 62443Purdue modelCompany and customer security policiesReview and validate OT security designs created by engineers or partnersBalance security, availability, and operational constraints in industrial environmentsPre-Sales & Solution AdvisoryAct as technical authority in pre-sales phases:Support sales and account teams with architecture inputAdvise on feasible and future-proof OT security solutionsTranslate technical architectures into:Clear scope definitionsEffort estimationsHigh-level budget indicators (equipment, licenses, engineering effort)Help pre-sales teams avoid under- or over-engineering by grounding offers in realistic architecturesParticipate in customer workshops and technical discussions to shape solution directionRisk & Security StrategyLead or support OT risk assessments from an architectural perspectiveDefine mitigation strategies that are:Technically soundOperationally realisticScalable over timeAdvise customers on roadmaps for improving OT security maturityCollaboration & LeadershipWork cross-functionally with:OT engineersIT security teamsAutomation engineersProject managersAct as a technical mentor for OT security engineersProvide architectural guidance during key project phases (design, commissioning, audits)Required Technical ExpertiseDeep expertise in OT security and industrial networking, including:SCADA, PLCs, DCS, industrial protocolsStrong knowledge of network segmentation and secure architecture principlesProven experience designing OT networks using the Purdue modelHands‑on background in at least one of:OT firewallingAutomated OT network monitoringOT network restructuring / re-addressingSolid understanding of:Firewalls and rule designSecure remote access patternsDMZ conceptsExperience with continuous monitoring (SNMP, NetFlow, or similar)Strong knowledge of Fortinet firewall architecture and configurationExperience with Active Directory (AD) in hybrid IT/OT environmentsExperience with Nozomi Networks (Guardian or similar) is a strong plusCisco certification is a plusPalo Alto firewall experience is a plusVirtualization and server architecture knowledge (VMs, segregation, availability) is required at design levelSoft Skills & MindsetSystem‑level thinker: sees the whole architecture, not just devicesAble to explain complex technical concepts to non‑security stakeholdersPragmatic: understands production constraints and legacy realitiesComfortable influencing decisions without formal authorityClear communicator, structured thinker, documentation‑friendlyNaturally collaborative across IT, OT, engineering, and business teamsLanguage & Location (Spain)Spanish: native or near-native level (mandatory)English: professional working proficiency (mandatory)Preferred location: Barcelona or nearbySeniorityMid‑Senior levelEmployment TypeFull‑timeJob FunctionInformation TechnologyJoin AG Solution Where Talent Shapes Industry 4.0At AG Solution, we build intelligent solutions for the process industry, combining automation, process control, data management, and MES/MOM systems to help manufacturers reach operational excellence.Now part of the Saphir Group, we are one of Europe’s leading Industry 4.0 partners, with more than 400 engineers and consultants working across Europe, the UK, and the US.Driven by People. Powered by Technology.Our success starts with our people. We invest in growth through continuous learning, mentorship, and our AG Academy, ensuring every colleague has the opportunity to develop their skills and career.We believe that innovation happens when people feel trusted, connected, and inspired.A Global Team with a Human TouchWith offices in over 15 cities worldwide, we bring together diverse expertise and perspectives — from Antwerp to Barcelona, Rotterdam to Lyon, and New York to Krakow.At AG Solution, you’ll work on meaningful projects that drive efficiency, sustainability, and digital transformation for leading manufacturers worldwide.Ready to shape the future of industry? xsgfvud Explore our opportunities and grow with a team that’s redefining what’s possible.#J-18808-Ljbffr