This is a remote position.
We are looking for a Principal OT Security Architect (Lead) to lead the development of enterprise Operational Technology cybersecurity standards, reference architectures, and security guidelines for regulated manufacturing environments.
You will act as the primary consultant defining OT security principles, network segmentation requirements, secure integration patterns, and governance standards, working closely with IT, OT, Engineering, Manufacturing, Quality, and Cybersecurity teams.
Key responsibilities
- Lead stakeholder workshops across IT, OT, Engineering, Manufacturing, Quality, and Cybersecurity teams.
- Define OT cybersecurity strategy, architecture principles, and governance frameworks.
- Develop Security Zones and Conduits methodologies aligned with IEC 62443.
- Define Defence-in-Depth security architecture using the Onion Model.
- Establish OT network segmentation and firewall architecture standards.
- Define secure connectivity requirements between OT, enterprise IT, and cloud environments.
- Develop OT identity and access management requirements, including privileged access controls.
- Establish cybersecurity requirements for vulnerability management and incident response.
- Ensure alignment with industry regulations, corporate standards, and data protection requirements.
- Lead technical reviews, governance forums, and document sign-off activities.
Requirements
- 12+ years of cybersecurity experience, including 7+ years specifically in OT/ICS cybersecurity.
- Experience in regulated manufacturing environments.
- Strong knowledge and practical application of IEC 62443 and NIST SP 800-82.
- Expertise in Industrial Control Systems and manufacturing cybersecurity.
- Experience conducting OT risk assessments and defining security governance.
- Strong understanding of the Purdue Model, industrial DMZ architectures, and network segmentation.
- Expertise in firewall security architecture.
- Knowledge of identity and access management for OT environments.
- Experience with OT incident response.
- Ability to lead cross-functional workshops and translate security requirements into enterprise standards and reference architectures.
Benefits
- Locations: New Jersey, USA or CEE region
- Contract Type: Freelance / Contract
- Start date: October, 2026
- Time Allocation: 40 hours/week
Skills Required
- 12 or more years of cybersecurity experience
- 7 or more years of OT/ICS cybersecurity experience
- Experience in regulated manufacturing environments
- Strong knowledge and practical application of IEC 62443
- Strong knowledge and practical application of NIST SP 800-82
- Expertise in Industrial Control Systems and manufacturing cybersecurity
- Experience conducting OT risk assessments and defining security governance
- Understanding of the Purdue Model, industrial DMZ architectures, and network segmentation
- Expertise in firewall security architecture
- Knowledge of identity and access management for OT environments
- Experience with OT incident response
- Ability to lead cross-functional workshops and translate security requirements into enterprise standards and reference architectures
What We Do
futureproof s.r.o. is a Czech consulting and staffing firm focused on data, analytics, cybersecurity, and IT infrastructure. It provides contract and permanent staffing, team augmentation, time-and-material resources, and specialist or lead placements, while also offering expert consulting through a network of architects and project leaders. The company emphasizes niche technical expertise, trusted relationships, continuous learning, and long-term value for clients.
%20copy.jpg)
