Role: OT Network Segmentation & Security Architect
Location: Florencevile, New Brunswick, Canada
Work Arrangement: Onsite
Employment Type: Full-Time FTE
Job Summary
We are seeking a senior OT (Operational Technology) Network Segmentation & Security Architect with deep experience in industrial/manufacturing environments, OT cybersecurity, identity and access management, cloud operations, and operational service transition. The ideal candidate will combine strong hands-on OT technical expertise with operational architecture, governance, service management, and stakeholder leadership capabilities. This role will be responsible for ensuring OT solutions are secure, operationally ready, supportable in production, and scalable across manufacturing plants.
Must-Have Technical/Functional Skills
OT Operations & Manufacturing Systems
- 10+ years of experience supporting industrial or manufacturing environments
- Strong hands-on experience with SCADA, HMI, Historian/PI systems, FactoryTalk, ThinManager, and OT infrastructure
- Experience with OT virtualization, backup/recovery, and industrial networking
- Strong understanding of plant-floor/OT operational environments and manufacturing systems
OT Cybersecurity
- Strong knowledge of OT cybersecurity principles and ISA/IEC 62443 standards
- Experience with OT network segmentation and secure architecture
- Experience working with SOC teams, incident response, and cybersecurity operations
- Experience with secure remote access and Privileged Access Management (PAM)
- Knowledge of Zero Trust security controls and OT security practices
Identity & Access Management (IAM)
- Hands-on experience with Active Directory (AD), Group Policy, DNS, and DHCP
- Experience with Microsoft Entra ID, MFA, and Conditional Access
- Strong understanding of enterprise IAM operations
- Experience with IT/OT identity separation is highly desirable
Cloud & Azure Operations
- Working knowledge of Microsoft Azure infrastructure and cloud operations
- Experience with Azure Landing Zones, subscriptions, policies, and vWAN
- Understanding of cloud operations and support models
- Ability to define operational runbooks, procedures, and support frameworks for Azure platforms
GitOps & Automation
- Working knowledge of Git-based workflows and GitOps operating models
- Experience with pull requests, branch protection, approval gates, and controlled deployment processes
- Ability to design and document operational procedures for GitOps-driven identity and infrastructure management
Roles & Responsibilities
- Operational Readiness & Service Transition
- Own operational readiness for OT solutions and ensure production supportability
- Define operational acceptance criteria, transition plans, and service-readiness requirements
- Lead hypercare activities through successful transition to Business-as-Usual (BAU) operations
- OT Service Management Framework
- Design and implement OT-specific ServiceNow processes
- Establish workflows for Incident, Request, Access, Change, Problem, and Knowledge Management
- Ensure OT service management processes align with enterprise standards and operational requirements
- OT Support & Service Coverage Model
- Develop the OT support operating model, including business-hours support and on-call escalation
- Define SLAs, escalation procedures, incident response processes, and support responsibilities
- Develop a future-state 24x7/follow-the-sun support model
- Operational Governance & Reporting
- Define governance structures, RACI matrices, escalation paths, KPIs, and operational dashboards
- Establish service review processes and operational reporting
- Ensure complete operational visibility through ServiceNow
- Identity, GitOps & Cloud Operationalization
- Convert OT identity, GitOps, and Azure platform designs into sustainable operational procedures
- Develop runbooks, monitoring requirements, support processes, and operational controls
- Ensure solutions are scalable, supportable, and aligned with enterprise standards
- Monitoring, Incident Readiness & Cybersecurity Response
- Define monitoring and alerting requirements for OT environments
- Establish alert ownership, incident workflows, and escalation procedures
- Coordinate incident readiness across OT, SOC, infrastructure, and cybersecurity teams
- Plant Onboarding & Hypercare
- Develop a repeatable OT plant onboarding framework for global deployment
- Create readiness checklists, deployment standards, stabilization procedures, and hypercare processes
- Capture lessons learned and continuously improve the plant rollout model
- OT Operations Architecture & Stakeholder Leadership
- Act as the OT Operations authority within the program team
- Provide operational architecture guidance and influence solution design decisions
- Identify and challenge solutions that are not operationally viable or supportable
- Coordinate across OT, IT, cybersecurity, infrastructure, plant operations, and service management teams
- Ensure OT operations are scalable, secure, and supportable across the organization
Generic Managerial Skills
- Strong stakeholder management and communication skills
- Operational governance and service transition experience
- Resource planning and operational leadership
- Strong problem-solving and decision-making abilities
- Experience managing cross-functional technical teams and stakeholders
- Continuous improvement and process optimization mindset
- Ability to operate effectively in complex industrial/manufacturing environments
Preferred/Additional Skills
- ServiceNow ITSM/ITOM experience
- Experience with OT/IT convergence programs
- Experience implementing OT network segmentation initiatives
- Experience with manufacturing plant technology transformations
- Knowledge of Zero Trust architecture and cybersecurity frameworks
- Experience working with managed service providers (MSPs)
- Experience supporting large-scale/global OT transformation programs
