IT-OT Infra Network Security Architect

Job Description

Must Have

 8+ year of IT Experience 6 +in-depth experience of securing Industrial Control Systems (ICS) like PLC, SCADA, DCS, Real time historians.  Experience in architecting in and IT or OT environment, including servers, network, workstations, and manufacturing equipment  Experience in WAN, LAN, TCP/IP, UDP, VPN, B2B, Firewall technologies  Experience in design and deployment of network security controls in enterprise network or industrial networks, including network zoning, segmentation and isolation designs and implementation.  Ideally a solid foundation in ICS support which was build up with IT topics like network architectures, network protocols, Industrial protocols, Active Directory, Backup processes, virtualization of applications and other general IT knowledge  experience in network monitoring, network visibility, traffic analysis and performance analysis of LAN/WAN, site labs, factories, file servers, and such network-dependent installations.  Fundamental knowledge in IT-Security threat modeling, vulnerability assessments and pen-testing.  Knowledge of related standards like IEC 62443, NIST 800-82

Good-to-Have

 Professional ICS / OT security certification like GICSP, or IT security certifications like CISSP.  Expert level certifications (Network security - e.g., CCIE Security)  Expertise in Cisco Networking, Checkpoint firewalls and Tufin Orchestration preferred  Exposure to industrial network ports & protocols (such as DNP3, Modbux, Profibus, LonWorks, DALI, BACnet, KNX, EnOcean, etc.)  Ability to collaborate with computer engineers, production engineers and OT and IT professionals to develop strategies for effective OT architecture; Experience in IT/OT cooperation or IT/OT alignment in the modern industrial setting.