IT/OT Cyber Security Architect

Collaboration Details:

• Form of Contract: B2B
• Work Model: Hybrid (2–3 days a week in the Warsaw office)
• Readiness for occasional global travel to manufacturing sites

As a Senior IT/OT Cyber Security Architect, you will provide strategic and technical leadership for global manufacturing security. A key focus will be leading OT modernization programs, migrating legacy industrial systems to hybrid cloud environments.

Codzienne zadania

• Act as the primary security authority for global manufacturing and supply chain projects.
• Conduct technical reviews of solution designs to ensure compliance with IT/OT security standards.
• Perform threat modeling (STRIDE, MITRE ATT&CK for ICS) and security risk assessments. Develop technology roadmaps aligned with IEC 62443 and NIST CSF.
• Oversee the security of Industry 4.0 initiatives, including IoT, edge computing, and factory digitalization.
• Advise global business leaders and external vendors, translating complex security risks into actionable business outcomes.

Technical Requirements

• OT/ICS Frameworks: Deep practical knowledge of IEC 62443 and Defense-in-Depth strategies in industrial settings.
• Network Convergence: Expertise in IT/OT integration, including the Purdue Model, network segmentation, DMZs, and industrial protocols (SCADA, PLC, DCS).
• Infrastructure & Cloud: Strong command of TCP/IP, VLANs, Next-Gen Firewalls (e.g., Palo Alto), and secure hybrid cloud architecture (Azure/GCP).
• Security Tools: Experience with OT-specific detection and IDS platforms (e.g., Armis).
• Ability to secure legacy industrial assets while implementing modern API and database hardening.

Qualifications & Experience

• Minimum 5 years in IT/OT Cyber Security Architecture.
• Background in Manufacturing, Pharma, Food & Beverage, or similar industrial sectors.
• Mastery of IEC 62443 (required); familiarity with NIST CSF and MITRE ATT&CK for ICS.
• CISSP, GICSP, or IEC 62443 professional certifications are highly desirable.

Must have

• IT/OT Cybersecurity
• Cybersecurity
• IEC 62443
• IT/OT Integration
• Purdue Model
• Network segmentation
• DMZ
• SCADA
• PLC
• DCS
• TCP/IP
• VLAN
• Palo Alto
• Azure
• GCP
• IDS Platforms
• Armis
• NIST CSF
• MITRE ATT&CK
• CISSP
• GICSP