Back to jobs
OT Cybersecurity Architect
UK-based hybrid | National client travel | ASAP start
The opportunity
NCC Group is looking for an experienced OT Cybersecurity Architect to join our fast-growing global OT practice. You will help critical national infrastructure clients across energy, water, manufacturing, rail and other operational environments design secure, resilient architectures that protect services relied upon by millions of people.
This is an architecture-led role with meaningful hands-on delivery. You will own OT cybersecurity architecture from discovery and requirements through high-level and detailed design, technical assurance, implementation support and acceptance. You will lead client workshops, make and communicate design decisions, and remain close enough to delivery to validate the technical detail.
Active SC clearance is essential due to the nature of the work and the client environments involved. We are looking for someone who can start as soon as possible.
Key Responsibilities
· Own current-state, transition and target-state OT security architecture workstreams.
· Lead architecture discovery, requirements and design workshops with OT engineers, IT teams, vendors and technology stakeholders.
· Design network segmentation, zones and conduits, IT/OT boundaries, secure remote access and access control models.
· Produce clear, auditable architecture artefacts, including principles, requirements, HLDs, LLDs, network diagrams, data flows, firewall rule specifications and bills of materials.
· Assess technology options and translate operational, safety and security needs into pragmatic design decisions.
· Provide hands-on technical assurance during implementation, testing and acceptance.
· Contribute to practice development, reusable methodologies, proposals and the development of junior colleagues.
Location and travel
This is a UK-based hybrid role, with travel to national client sites expected for approximately 20% of the time. International travel or support may also be required by agreement.
Skills, Knowledge & Expertise
What we are looking for
· Demonstrable experience designing and assuring OT/ICS security architectures in live operational environments.
· Strong knowledge of OT architecture patterns, segmentation, zones and conduits, secure remote access, identity and access models, and traffic flow analysis.
· Hands-on technical depth across firewalls, switching, routing, virtualisation and security platforms in OT or converged IT/OT environments.
· Experience taking architecture from concept through detailed design, implementation support and acceptance.
· Working knowledge of IEC 62443, including security levels, foundational requirements and defence-in-depth.
· Understanding of OT constraints, including availability, safety, legacy systems and restricted change windows.
· Experience in rail, automotive, renewables, manufacturing or comparable OT environments.
Useful additional experience
· OT technologies and protocols, including HMI, PLC, RTU, DCS, SCADA, IEC 61850, DNP3 and Modbus/TCP.
· NIST SP 800-82, NIST 800-53, CIS or STIG standards.
· Vendor evaluation, procurement support, zero-trust principles or software-defined segmentation in OT.
· Relevant certifications such as IEC 62443 Cybersecurity Expert, GICSP, GRID or equivalent.
Job Benefits
What do we offer in return?
We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits:
To ensure a fair and consistent assessment process, candidates must not use AI tools to generate, suggest, coach or provide responses during live or recorded interviews unless this has been approved in advance, by the hiring team. For more information please read our AI in Hiring - Candidate Policy.
If you do not want us to retain your details, you can utilise the Manage Your Data tool provided by Pinpoint or contact us directly at: global.ta@nccgroup.com. All personal data is held in accordance with the NCC Group Privacy Notice.
We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.
Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process.
NCC Group
OT Architect
United Kingdom Hybrid 5-10 yrs exp IT Services and IT Consulting 2,642 employees
OT/ICS Security ArchitectureNetwork SegmentationZones and ConduitsSecure Remote AccessIdentity and Access Management
Requirements
Candidates need demonstrable experience designing and assuring OT/ICS security architectures in live operational environments, with hands-on expertise in network and security technologies and end-to-end architecture delivery. They should understand IEC 62443 and OT constraints such as safety, availability, legacy systems, and restricted change windows; active UK SC clearance is essential.
Job Description
Department: Cyber Services and Capabilities
Location: GBR Remote
OT Cybersecurity Architect
UK-based hybrid | National client travel | ASAP start
The opportunity
NCC Group is looking for an experienced OT Cybersecurity Architect to join our fast-growing global OT practice. You will help critical national infrastructure clients across energy, water, manufacturing, rail and other operational environments design secure, resilient architectures that protect services relied upon by millions of people.
This is an architecture-led role with meaningful hands-on delivery. You will own OT cybersecurity architecture from discovery and requirements through high-level and detailed design, technical assurance, implementation support and acceptance. You will lead client workshops, make and communicate design decisions, and remain close enough to delivery to validate the technical detail.
Active SC clearance is essential due to the nature of the work and the client environments involved. We are looking for someone who can start as soon as possible.
Key Responsibilities
· Own current-state, transition and target-state OT security architecture workstreams.
· Lead architecture discovery, requirements and design workshops with OT engineers, IT teams, vendors and technology stakeholders.
· Design network segmentation, zones and conduits, IT/OT boundaries, secure remote access and access control models.
· Produce clear, auditable architecture artefacts, including principles, requirements, HLDs, LLDs, network diagrams, data flows, firewall rule specifications and bills of materials.
· Assess technology options and translate operational, safety and security needs into pragmatic design decisions.
· Provide hands-on technical assurance during implementation, testing and acceptance.
· Contribute to practice development, reusable methodologies, proposals and the development of junior colleagues.
Location and travel
This is a UK-based hybrid role, with travel to national client sites expected for approximately 20% of the time. International travel or support may also be required by agreement.
Skills, Knowledge & Expertise
What we are looking for
· Demonstrable experience designing and assuring OT/ICS security architectures in live operational environments.
· Strong knowledge of OT architecture patterns, segmentation, zones and conduits, secure remote access, identity and access models, and traffic flow analysis.
· Hands-on technical depth across firewalls, switching, routing, virtualisation and security platforms in OT or converged IT/OT environments.
· Experience taking architecture from concept through detailed design, implementation support and acceptance.
· Working knowledge of IEC 62443, including security levels, foundational requirements and defence-in-depth.
· Understanding of OT constraints, including availability, safety, legacy systems and restricted change windows.
· Experience in rail, automotive, renewables, manufacturing or comparable OT environments.
Useful additional experience
· OT technologies and protocols, including HMI, PLC, RTU, DCS, SCADA, IEC 61850, DNP3 and Modbus/TCP.
· NIST SP 800-82, NIST 800-53, CIS or STIG standards.
· Vendor evaluation, procurement support, zero-trust principles or software-defined segmentation in OT.
· Relevant certifications such as IEC 62443 Cybersecurity Expert, GICSP, GRID or equivalent.
Job Benefits
What do we offer in return?
We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits:
- Flexible Working: Balance your work and personal life with our flexible working options.
- Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave.
- Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.
- Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.
- Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.
- Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.
To ensure a fair and consistent assessment process, candidates must not use AI tools to generate, suggest, coach or provide responses during live or recorded interviews unless this has been approved in advance, by the hiring team. For more information please read our AI in Hiring - Candidate Policy.
If you do not want us to retain your details, you can utilise the Manage Your Data tool provided by Pinpoint or contact us directly at: global.ta@nccgroup.com. All personal data is held in accordance with the NCC Group Privacy Notice.
We are committed to diversity and flexibility in the workplace. If you require any reasonable adjustments to support you during the application process, please tell us at any stage.
Please note that this role involves mandatory pre-employment background checks due to the nature of the work NCC Group does. To apply, you must be willing and able to undergo the vetting process.
Skills
OT/ICS Security ArchitectureNetwork SegmentationZones and ConduitsSecure Remote AccessIdentity and Access ManagementTraffic Flow AnalysisFirewallsSwitching and RoutingVirtualisationIEC 62443High-Level and Low-Level DesignTechnical AssuranceSCADAPLCDCSOT Protocols
About NCC Group
We are NCC Group. A people powered, tech-enabled global cyber security and resilience company with 2,000 colleagues around the world. For over 25 years we’ve been trusted by the world’s leading companies and Governments to manage and deliver cyber resilience, working together to create a more secure digital future.
View company profile →