Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Operational Technology (OT) Security
Good to have skills : Network Security Implementation, Communication, Problem-solving
Minimum 5 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary: The OT Transformation lead is responsible for deploying, configuring, and managing Intrusion Detection Systems (IDS) across Operational Technology (OT) environments. This role ensures continuous monitoring, detection, and response capabilities for ICS/SCADA networks. You will work closely with site OT teams, SOC, network engineering, and cybersecurity functions to maintain high visibility and detect threats within industrial networks. Roles & Responsibilities: Deploy OT IDS solutions (e.g., Claroty, Nozomi, Dragos, Tenable.ot, FortiNAC/OT sensors) across plants and industrial networks. Conduct site readiness assessments to validate network architecture, SPAN/tap points, and sensor placement. Configure IDS sensors, collectors, management consoles, and integrations based on vendor best practices. Validate correct ingestion of traffic from switches, firewalls, and mirrored ports. Perform baseline tuning of alerts, signatures, and anomaly detection models. Investigate OT security events flagged by IDS and escalate to SOC or site cybersecurity teams. Support triage by providing packet captures, flow-level insights, and system behavior details. Coordinate with OT, networking, and plant teams to validate incidents and support containment. Manage patching, firmware updates, and system upgrades for OT IDS components. Track sensor uptime, performance metrics, and anomaly detection reliability. Maintain interface between IDS and SIEM/SOAR tools and ensure logs are flowing consistently. Professional & Technical Skills: Experience in OT/ICS cybersecurity, network security, or security operations. Experience with OT IDS platforms (Claroty CTD, Nozomi Guardian, Dragos Platform, Tenable, etc.). Strong understanding of OT network architecture: Level 0–3.5, Purdue model, iDMZ, SPAN/TAP design. Good knowledge of ICS protocols: Modbus, OPC-UA/DA, DNP3, Profinet, Ethernet/IP, BACnet, etc. Familiarity with packet analysis (Wireshark), intrusion detection techniques, and anomaly detection. Understanding of SIEM tools and log monitoring processes. Experience with asset inventory, vulnerability management, and network segmentation in OT. Additional Information: - The candidate should have minimum 5 years of experience in Operational Technology (OT) Security. - ISA/IEC 62443 Cybersecurity Certificates (e.g., 62443 Cybersecurity Fundamentals),GICSP, GRID, or equivalent OT security certifications (added advantage) - Experience working in manufacturing, energy, utilities, oil & gas,or other industrial sectors is beneficial. - This position is WFO requirement for Bangalore location. - A 15 years full time education is required.