Principal Cyber Security Architect - Infrastructure & Manufacturing

About us

At Dyson, we are not just creating innovative, technology-enabled products; we are also breaking new ground in cybersecurity. Our products are becoming more advanced and interconnected, which means we face a constantly evolving cyber threat landscape. This requires a highly skilled candidate to join our team, with a passion for staying ahead of emerging threats and keeping our products secure.

We take a proactive approach to cybersecurity. We do not wait for threats to emerge; we anticipate them and respond with innovative solutions. This means that at Dyson, you will have the opportunity to work with innovative technologies, like artificial intelligence and machine learning, to protect our products and customers.

You will be part of a team of cybersecurity experts, utilizing the latest tools and technologies to identify and respond to threats in real-time. You will work closely with our engineering and product teams to ensure that security is integrated into every aspect of our business.

Join our team at Dyson, and you will be at the forefront of cybersecurity, working on some of the most innovative and advanced products in the industry. You will have the opportunity to develop your skills and knowledge, collaborating with a talented team of experts to ensure we are always secure. If you are passionate about cybersecurity and looking for an exciting and challenging role, Dyson is the place for you.

About the role

As Principal Cybersecurity Architect for Infrastructure & Manufacturing Security, you will be the technical authority for security architecture across enterprise infrastructure, manufacturing environments, operational technology, industrial IoT and the systems that underpin Dyson engineering, supply chain and production operations. The role owns architecture direction, reference patterns, security standards and capability roadmaps spanning network, server, storage, database, identity, cloud, OT and industrial control systems. 

What you will do

• Define target-state security architectures for enterprise infrastructure, manufacturing networks, industrial platforms and Operational Technology environments. 
• Own security architecture and segmentation strategy aligned to Purdue Enterprise Reference Architecture, including Levels 0–5, industrial DMZs, conduit design, trust boundaries and secure remote access. 
• Lead architecture reviews for manufacturing facilities, factories, R&D laboratories, warehouses and supply-chain technology platforms. 
• Design resilient network security architectures including campus, WAN, SD-WAN, datacentre, cloud connectivity, firewalls, NAC, DNS security, micro-segmentation and Zero Trust controls. 
• Define hardened server, virtualisation, hypervisor, container and storage security patterns including privileged access, monitoring, configuration baselines and recovery controls. 
• Design database security architectures covering Oracle, Microsoft SQL, PostgreSQL and distributed data platforms, including encryption, PAM integration, audit logging, activity monitoring and segregation of duties. 
• Define OT and IIoT security controls for PLCs, HMIs, SCADA, historians, engineering workstations, industrial gateways and manufacturing execution systems. 
• Establish architecture standards aligned to IEC 62443, NIST 800-82, Purdue Model, Zero Trust principles and secure manufacturing practices. 
• Lead threat modelling against ransomware, supply-chain compromise, engineering workstation compromise, lateral movement, unsafe control manipulation and loss-of-view/loss-of-control scenarios. 
• Drive secure onboarding of connected manufacturing assets and industrial IoT platforms, including identity, certificate management, firmware integrity and lifecycle governance. 
• Work with engineering and operations teams to define compensating controls where legacy OT systems cannot support modern security capabilities. 
• Define security requirements for industrial remote access, third-party suppliers, maintenance providers and manufacturing support partners. 
• Provide senior technical leadership during cyber incidents affecting enterprise or manufacturing environments. 

To succeed in this role you should,

·       Extensive experience designing and implementing security architectures across network, server, storage, database, cloud, identity and manufacturing environments. 

·       Proven implementation experience of Purdue Model aligned segmentation, industrial DMZs, OT zoning strategies and secure conduits. 

·       Deep understanding of ICS and OT technologies including PLCs, SCADA, DCS, historians, MES, engineering workstations and industrial protocols such as Modbus, Profinet, EtherNet/IP, OPC-UA and MQTT. 

·       Strong expertise in enterprise network architecture including routing, switching, firewalls, NAC, SD-WAN, micro-segmentation and network detection technologies. 

·       Hands-on security architecture experience across Windows, Linux, virtualisation platforms, Kubernetes and hybrid cloud environments. 

·       Strong database security knowledge including access control, encryption, key management, DAM, logging and high-availability architectures. 

·       Experience implementing Zero Trust for both traditional enterprise infrastructure and manufacturing environments. 

·       Strong understanding of attack paths between IT and OT environments and practical methods to reduce blast radius and lateral movement. 

·       Experience developing technical standards, reference architectures, low-level designs and audit-defensible security requirements. 

·       Ability to engage deeply with engineering, manufacturing, infrastructure, network and operations teams while influencing executive stakeholders. 

·       Enterprise infrastructure security: network, server, storage, virtualisation, cloud and identity. 

·       Manufacturing security: factory systems, MES, OT monitoring, ICS security and industrial operations. 

·       Industrial networking: Purdue architecture, segmentation, firewalls, industrial DMZs and secure conduits. 

·       OT governance: IEC 62443, NIST 800-82, risk assessments and compensating controls. 

·       Industrial IoT: device identity, PKI, firmware integrity, lifecycle management and telemetry security. 

·       Cyber resilience: backup, recovery, ransomware containment, operational continuity and disaster recovery.

Dyson is an equal opportunity employer. We know that great minds don’t think alike, and it takes all kinds of minds to make our technology so unique. We welcome applications from all backgrounds and employment decisions are made without regard to race, colour, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other any other dimension of diversity.