Devoteam · Praha 1, Hlavní město Praha, cz ·
Freelance OT Security Architect defining global OT security strategies, designing network segmentation and infrastructure protections (firewalls, IDS/IPS, secure remote access) for industrial control environments in the space program sector, ensuring GxP and regulatory compliance.
First Quality · US GA Home Office
integrity360 · Stockholm, Sweden
Ball Corporation
inetum2 · Monterrey, N.L., mx
delan-associates-inc · Houston, United States
OT Security Architect (freelance)
We're seeking an experienced OT Security Architect to join our team for a long-term project. This role requires immediate availability and a commitment of over one year. In this role, you will define global and regional OT security strategies while establishing tailored security baselines and controls across industrial control environments. You will lead the design and deployment of critical infrastructure protections—including network segmentation, firewalls, secure remote access, and IDS/IPS solutions—ensuring all architectures accommodate the operational constraints of manufacturing sites and adhere to GxP and regulatory standards.
What We Need You For:
Start ASAP: This is an immediate requirement, and we are looking for a professional who can begin work without delay.
Experience & Education: Senior-level experience as an OT Security Architect or Lead, backed by a degree in Computer Science, Engineering, IT, or equivalent practical experience.
OT Security Strategy & Leadership: Proven track record of defining, communicating, and executing global or regional OT security roadmaps and delivering technical guidance to project teams.
Architecture & Network Controls: Expertise in designing and deploying OT infrastructure controls, including network segmentation (Purdue model/zones and conduits), firewalls, secure remote access, and IDS/IPS.
Risk Management & Tool Selection: Hands-on experience performing OT risk evaluations, building mitigation plans, and selecting/deploying modern OT cybersecurity technologies.
Compliance & GxP Standards: Strong knowledge of regulatory compliance in manufacturing environments, including GxP requirements and industrial frameworks (ISA/IEC 62443, NIST SP 800-82, ISO 27001).
Vendor & Cross-Functional Collaboration: Ability to manage external technology vendors and liaise effectively across IT, engineering, business, and plant operational teams.
Technical Documentation: Demonstrated ability to create clear, auditable architectural blueprints, security baselines, and technical documentation.
What We Offer:
Long-Term Project (1+ year): We offer a stable, long-term collaboration on a well-defined project with a clear scope.
Unique Projects: You'll be involved in groundbreaking projects within the space program sector with a global reach.
Location: Prague, with the possibility of occasional remote work and travel within Europe as required by the project.
If you meet the security clearance requirement, can start immediately, and have relevant experience, please send us your professional profile and a description of your expertise. We look forward to collaborating with you.