OT Network Segmentation & Security Architect

Job Title: OT Network Segmentation & Security Architect

Location: Florencevile, Canada

Job Type: Full-Time Permanent

Must Have Technical/Functional Skills:

 OT Operations & Manufacturing Systems Expertise

• 10+ years of experience supporting industrial/manufacturing environments.
• Hands-on knowledge of SCADA, HMI, Historian/PI systems, FactoryTalk, ThinManager, OT infrastructure, virtualization, backup/recovery, and industrial networking.

 OT Cybersecurity Knowledge

• Strong understanding of ISA/IEC 62443 standards and OT security principles.
• Experience with SOC interactions, incident response, secure remote access, privileged access management (PAM), and Zero Trust security controls.

 Identity & Access Management (IAM)

• Hands-on experience with Active Directory, Group Policy, DNS, DHCP, Microsoft Entra ID, MFA, Conditional Access, and enterprise IAM operations.
• Experience in IT/OT identity separation environments is highly desirable.

 Cloud & Azure Operations

• Understanding of Azure infrastructure, Landing Zones, subscriptions, policies, vWAN, and cloud operations/support models.
• Ability to define operational runbooks and support frameworks for cloud platforms.

 GitOps & Automation Literacy

• Working knowledge of Git-based workflows including pull requests, branch protections, approval gates, and GitOps operating models.
• Ability to design and document operational procedures around GitOps-driven identity management.

Roles & Responsibilities:

1. Own Operational Readiness & Service Transition

• Ensure all OT solutions are supportable in production, define operational acceptance criteria, transition plans, and manage hypercare through BAU acceptance.

1. Design OT Service Management Framework

• Lead the design of OT-specific ServiceNow processes including incident, request, access, change, problem, and knowledge management workflows.

1. Establish OT Support & Service Coverage Model

• Build the support operating model, including business-hours support, on-call escalation, SLAs, incident response processes, and future 24x7/follow-the-sun support blueprint.

1. Drive Operational Governance & Reporting

• Define governance structure, RACIs, escalation paths, KPIs, dashboards, service reviews, and ensure complete operational visibility through ServiceNow.

1. Operationalize Identity, GitOps & Cloud Services

• Convert OT identity, GitOps, and Azure platform designs into sustainable operating procedures, runbooks, monitoring, and support models.

1. Lead Monitoring, Incident Readiness & Cyber Response Coordination

• Define monitoring requirements, alert ownership, incident workflows, escalation procedures, and ensure readiness across OT, SOC, and security teams.

1. Build the Plant Onboarding & Hypercare Factory

• Create a repeatable onboarding model for OT plants, including readiness checklists, deployment standards, stabilization support, and lessons learned for global rollout.

1. Act as the MSP’s OT Operations Authority

• Serve as the embedded operational architect within the program team, influencing design decisions, challenging non-operable solutions, coordinating stakeholders, and ensuring scalable, supportable OT operations.