OT Cybersecurity Architect

Client engagement and advisory:
- Act as the primary technical point of contact for clients on OT security architecture, risk, and roadmap discussions.
- Run client workshops, site walkdowns, and requirement-gathering sessions with operations, engineering, and IT teams.
- Advise client senior management on OT security strategy, risks, and investment priorities.
- Prepare and present assessment reports, architecture documents, and executive-level presentations.
- Build and maintain long-term relationships with clients, OEMs, system integrators, and technology partners.

Pre-sales and business support:
- Support the sales team with technical scoping, solution design, proposals, estimates, and client presentations.
- Identify new service opportunities within existing client accounts and share them with the sales team.
- Design secure OT architectures based on IEC 62443 (zones and conduits), the Purdue Model, and defense-in-depth.
- Define reference architectures, standards, and design patterns for client OT environments.
- Design IT/OT segmentation, DMZ, firewall, secure remote access, and unidirectional gateway solutions.
- Review the security aspects of client OT projects, upgrades, and vendor solutions.

Assessment and compliance:
- Conduct OT security assessments, risk assessments, and gap analyses against IEC 62443, NIST SP 800-82, and related frameworks.
- Align client designs and practices with UAE, Qatar, and Oman cybersecurity regulations and sector-specific standards.
- Develop remediation plans and security roadmaps, and support client audits.

Delivery and implementation:
- Lead the technical delivery of OT security projects, including asset discovery, network monitoring, anomaly detection, and vulnerability and patch management.
- Define OT-appropriate hardening, backup, change control, and patching approaches that respect uptime and safety constraints.
- Support client incident response through playbooks, tabletop exercises, and post-incident reviews.
- Coordinate with project managers and delivery teams to meet scope, quality, and timeline commitments.

Capability building:
- Mentor team members and deliver OT security awareness sessions to client engineering and operations staff.
- Track emerging OT threats, technologies, and regional regulatory changes.

Knowledge, skills, competencies, and experience:
- Bachelor’s degree in Cybersecurity, Computer Science, Electrical/Electronics/Industrial Engineering, or a related field.
- 5-8 years of OT/ICS cybersecurity experience, including hands-on architecture and design work, with experience in client-facing or consulting roles.
- Strong knowledge of IEC 62443, NIST SP 800-82, the Purdue Model, and ICS/SCADA protocols (Modbus, DNP3, OPC, Profinet, etc.).
- Experience with OT security platforms such as Nozomi, Claroty, Dragos, Tenable OT, or Microsoft Defender for IoT.
- Familiarity with major control system vendors (Siemens, Rockwell, Schneider Electric, ABB, Honeywell, etc.).
- Knowledge of network security (firewalls, segmentation, VPN, IDS/IPS) and secure remote access in industrial environments.
- Experience in oil and gas, utilities, power, water, manufacturing, or other critical infrastructure is preferred.
- Additional certifications such as ISA/IEC 62443 (Mandatory), GICSP, GRID, CISSP, CISM, or CISA are a plus.
- Familiarity with UAE, Qatar, and Oman cybersecurity regulations is an advantage.
- Excellent communication, presentation, and stakeholder management skills, with the ability to explain technical risk to non-technical audiences.
- Willingness to travel across the UAE, Qatar, and Oman and to work on-site in industrial facilities.

Location: Remote - UAE - Dubai - United Arab Emirates

Skills required for this job:

• Ciberseguridad OT
• Critical infrastructure
• Cyber laws
• Cybersecurity architecture
• Cybersecurity governance
• Firewall
• Gap analysis
• ISA/IEC 62443
• Industrial control system (ICS)
• Intrusion prevention system (IPS)
• Network security
• Patch management
• Remote access
• Risk assessment
• Segmentation Strategy
• Virtual private network