OT Architect

NCC Group

. Help critical national infrastructure clients across energy, water, manufacturing, rail and other operational environments design secure, resilient architectures .

Posted 10/12/2026full-timeUnited KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and assuring OT/ICS security architectures, with a strong focus on network segmentation, secure remote access, and compliance with IEC 62443 standards. Proven ability to lead architecture workshops and provide technical assurance in live operational environments.

Highest-signal resume keywords

OT/ICS Security Architecture DesignNetwork Segmentation and Access ControlIEC 62443 ComplianceHands-On Technical AssuranceExperience in Operational Technology Environments

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

OT Architecture PatternsTraffic Flow AnalysisFirewall ConfigurationSwitching and RoutingVirtualization TechnologiesHMI, PLC, RTU, DCS, SCADANIST SP 800-82NIST 800-53CIS StandardsZero-Trust Principles

Soft Skills

LeadershipCollaborationCommunication

Tools & Technologies

Security PlatformsNetwork DiagramsData Flow SpecificationsBills of Materials

Certifications & Qualifications

IEC 62443 Cybersecurity ExpertGICSPGRID

Industry Keywords

Operational TechnologyCritical National InfrastructureEnergy SectorWater SectorManufacturing SectorRail SectorConverged IT/OT EnvironmentsSafety and Security NeedsLegacy SystemsRestricted Change Windows

Tech Stack

Tools & technologies

Cyber SecurityFirewallsSwitching

About the role

Key responsibilities & impact

Help critical national infrastructure clients across energy, water, manufacturing, rail and other operational environments design secure, resilient architectures
Own OT cybersecurity architecture from discovery and requirements through high-level and detailed design, technical assurance, implementation support and acceptance
Lead architecture discovery, requirements and design workshops with OT engineers, IT teams, vendors and technology stakeholders
Own current-state, transition and target-state OT security architecture workstreams
Design network segmentation, zones and conduits, IT/OT boundaries, secure remote access and access control models
Produce architecture artefacts including principles, requirements, HLDs, LLDs, network diagrams, data flows, firewall rule specifications and bills of materials
Assess technology options and translate operational, safety and security needs into pragmatic design decisions
Provide hands-on technical assurance during implementation, testing and acceptance
Contribute to practice development, reusable methodologies, proposals and development of junior colleagues
Travel to national client sites approximately 20% of the time; international travel or support may also be required by agreement

Requirements

What you’ll need

Active SC clearance is essential
Demonstrable experience designing and assuring OT/ICS security architectures in live operational environments
Strong knowledge of OT architecture patterns, segmentation, zones and conduits, secure remote access, identity and access models, and traffic flow analysis
Hands-on technical depth across firewalls, switching, routing, virtualisation and security platforms in OT or converged IT/OT environments
Experience taking architecture from concept through detailed design, implementation support and acceptance
Working knowledge of IEC 62443, including security levels, foundational requirements and defence-in-depth
Understanding of OT constraints, including availability, safety, legacy systems and restricted change windows
Experience in rail, automotive, renewables, manufacturing or comparable OT environments
Useful additional experience with HMI, PLC, RTU, DCS, SCADA, IEC 61850, DNP3 and Modbus/TCP
Useful additional experience with NIST SP 800-82, NIST 800-53, CIS or STIG standards
Useful additional experience in vendor evaluation, procurement support, zero-trust principles or software-defined segmentation in OT
Relevant certifications such as IEC 62443 Cybersecurity Expert, GICSP, GRID or equivalent are useful additional experience

Benefits

Comp & perks

Flexible working options
25 days of holiday plus bank holidays
Option to buy up to 5 additional days of annual leave
Pension
Life Assurance
Share Save Scheme
Community volunteering opportunities
Special time off for marriage/civil partnership, becoming a grandparent, and welcoming a new pet
Generous maternity and paternity leave
Time off and support for fertility treatments