NCC Group

Global cyber security and resilience provider

OT Cybersecurity Architect

Security Engineering & ArchitectureUpdated on Nov 13

Full-timeNo salary listed

About the Job

Requirements

Demonstrable experience designing and assuring OT/ICS security architectures in live operational environments.
Strong knowledge of OT architecture patterns, segmentation, zones and conduits, secure remote access, identity and access models, and traffic flow analysis.
Hands-on technical depth across firewalls, switching, routing, virtualisation and security platforms in OT or converged IT/OT environments.
Experience taking architecture from concept through detailed design, implementation support and acceptance.
Working knowledge of IEC 62443, including security levels, foundational requirements and defence-in-depth.
Understanding of OT constraints, including availability, safety, legacy systems and restricted change windows.
Experience in rail, automotive, renewables, manufacturing or comparable OT environments.
Active SC clearance is essential.

Responsibilities

Own current-state, transition and target-state OT security architecture workstreams.
Lead architecture discovery, requirements and design workshops with OT engineers, IT teams, vendors and technology stakeholders.
Design network segmentation, zones and conduits, IT/OT boundaries, secure remote access and access control models.
Produce clear, auditable architecture artefacts, including principles, requirements, high-level and low-level designs, network diagrams, data flows, firewall rule specifications and bills of materials.
Assess technology options and translate operational, safety and security needs into pragmatic design decisions.
Provide hands-on technical assurance during implementation, testing and acceptance.
Contribute to practice development, reusable methodologies, proposals and the development of junior colleagues.

Desired Qualifications

Experience with OT technologies and protocols, including HMI, PLC, RTU, DCS, SCADA, IEC 61850, DNP3 and Modbus/TCP.
Experience with NIST SP 800-82, NIST 800-53, CIS or STIG standards.
Experience with vendor evaluation, procurement support, zero-trust principles or software-defined segmentation in OT.
Relevant certifications such as IEC 62443 Cybersecurity Expert, GICSP, GRID or equivalent.

OT Cybersecurity Architect

UK-based hybrid | National client travel | ASAP start

The opportunity

NCC Group is looking for an experienced OT Cybersecurity Architect to join our fast-growing global OT practice. You will help critical national infrastructure clients across energy, water, manufacturing, rail and other operational environments design secure, resilient architectures that protect services relied upon by millions of people.

This is an architecture-led role with meaningful hands-on delivery. You will own OT cybersecurity architecture from discovery and requirements through high-level and detailed design, technical assurance, implementation support and acceptance. You will lead client workshops, make and communicate design decisions, and remain close enough to delivery to validate the technical detail.

Active SC clearance is essential due to the nature of the work and the client environments involved. We are looking for someone who can start as soon as possible.

· Own current-state, transition and target-state OT security architecture workstreams.
· Lead architecture discovery, requirements and design workshops with OT engineers, IT teams, vendors and technology stakeholders.

· Design network segmentation, zones and conduits, IT/OT boundaries, secure remote access and access control models.
· Produce clear, auditable architecture artefacts, including principles, requirements, HLDs, LLDs, network diagrams, data flows, firewall rule specifications and bills of materials.
· Assess technology options and translate operational, safety and security needs into pragmatic design decisions.
· Provide hands-on technical assurance during implementation, testing and acceptance.
· Contribute to practice development, reusable methodologies, proposals and the development of junior colleagues.

Location and travel

This is a UK-based hybrid role, with travel to national client sites expected for approximately 20% of the time. International travel or support may also be required by agreement.

What we are looking for

· Demonstrable experience designing and assuring OT/ICS security architectures in live operational environments.
· Strong knowledge of OT architecture patterns, segmentation, zones and conduits, secure remote access, identity and access models, and traffic flow analysis.
· Hands-on technical depth across firewalls, switching, routing, virtualisation and security platforms in OT or converged IT/OT environments.
· Experience taking architecture from concept through detailed design, implementation support and acceptance.
· Working knowledge of IEC 62443, including security levels, foundational requirements and defence-in-depth.
· Understanding of OT constraints, including availability, safety, legacy systems and restricted change windows.
· Experience in rail, automotive, renewables, manufacturing or comparable OT environments.

Useful additional experience

· OT technologies and protocols, including HMI, PLC, RTU, DCS, SCADA, IEC 61850, DNP3 and Modbus/TCP.
· NIST SP 800-82, NIST 800-53, CIS or STIG standards.
· Vendor evaluation, procurement support, zero-trust principles or software-defined segmentation in OT.
· Relevant certifications such as IEC 62443 Cybersecurity Expert, GICSP, GRID or equivalent.

About the Company

NCC Group

Global cyber security and resilience provider

NCC Group provides cyber security and resilience services to organizations and governments around the world. It helps protect digital systems by offering a range of capabilities such as security testing, risk assessment, and resilience planning, backed by a global team of experts and supported by technology-enabled tools. The company’s approach combines human expertise with technical solutions to identify vulnerabilities, assess risk, and implement concrete steps to improve security and continuity. What sets NCC Group apart is its large, worldwide team and its emphasis on practical, end-to-end cyber resilience—working with clients from assessment through to implementation and ongoing assurance. The goal is to create a more secure digital future by helping customers manage cyber risk, reduce threats, and maintain business continuity at scale.

Company size: 1,001-5,000
Company stage: IPO
Headquarters: Manchester, United Kingdom
Founded: 1999

Recently Posted Jobs

Explore more opportunities at NCC Group

See more jobs