Senior OT/ICS Cybersecurity Architect - Industrial Control Systems Security

Description

Dragonfli Group is a cybersecurity and IT consulting firm based in Washington, DC, serving both federal agencies and large commercial enterprises. We specialize in delivering mission-focused security solutions that help organizations safeguard critical systems, protect sensitive data, and enable resilient digital transformation.

We are seeking a Senior OT/ICS Cybersecurity Architect to join our consulting practice in support of a large commercial enterprise. This is a remote opportunity with occasional travel to client sites (primarily in the Houston region).

In this role, you will:

• Serve as the trusted security architect guiding industrial organizations through the complexities of Operational Technology (OT) and Industrial Control Systems (ICS) cybersecurity.
• Lead the design and implementation of secure architectures for SCADA, DCS, and PLC-based environments, ensuring safe, resilient, and compliant industrial operations.
• Partner with cross-functional IT and OT teams to close security gaps, integrate tools, and align operational risk management with industry standards such as NIST 800-82 and IEC 62443.
• Deploy and optimize leading security solutions including Claroty for asset discovery and vulnerability management, Palo Alto and Cradlepoint for secure networking, CrowdStrike for monitoring, BeyondTrust for privileged access, and Splunk/ServiceNow for visibility and incident management.
• Conduct consequence-based risk assessments, oversee vulnerability remediation programs, and ensure readiness for regulatory audits.
• Drive incident response preparedness by creating OT-specific playbooks and coordinating joint exercises across IT and OT teams.
• Deliver policies, training, and workshops that empower plant operators, engineers, and third-party vendors to uphold a strong cybersecurity posture.

This is a senior consulting position requiring both deep technical knowledge and strong leadership skills. The ideal candidate will have 7–10+ years of hands-on OT/ICS cybersecurity experience, demonstrated expertise in designing secure architectures, and the ability to communicate effectively with executives, engineers, and client stakeholders alike.

Key Responsibilities:

OT/ICS Security Architecture & Design

• Lead the design and implementation of OT/ICS cybersecurity architectures, including network segmentation, secure remote access, and integration with IT security controls.
• Develop and document security reference architectures, blueprints, and roadmaps tailored to client environments and industry standards (e.g., NIST 800-82, IEC 62443).
• Evaluate, select, and deploy OT/ICS cybersecurity technologies, with hands-on experience in:
• Claroty for OT asset discovery and vulnerability management
• Palo Alto and Cradlepoint for firewall configuration, segmentation, and secure connectivity
• CrowdStrike for OT monitoring and threat detection
• BeyondTrust for privileged secure remote access management
• Familiarity with other vendor tools such as Cisco (network security), ServiceNow (ticketing and workflow integration), Splunk (SIEM/log analytics), Crowdstrike (Falcon Discover for IoT) and TxOne (OT endpoint protection)
• Conduct security acceptance testing and validation of new or updated OT systems to ensure compliance with security requirements and industry best practices.

Risk Assessment & Vulnerability Management

• Perform consequence-based risk assessments for OT environments, utilizing methodologies such as Cyber Process Hazards Analysis (Cyber PHA) to identify, analyze, and prioritize cyber risks.
• Lead vulnerability management efforts for OT/ICS assets, including the use of Claroty for vulnerability identification, risk scoring, and remediation planning.
• Support clients in achieving regulatory compliance and readiness for audits related to OT/ICS cybersecurity.

Incident Response & Monitoring

• Design and implement OT/ICS security monitoring solutions, leveraging tools such as CrowdStrike for endpoint and network monitoring, and Splunk for log aggregation and analytics.
• Collaborate with IT and OT teams to develop and test incident response plans specific to industrial environments.
• Integrate monitoring and alerting workflows with ServiceNow for streamlined incident management.

Governance, Policy, and Training

• Develop and update OT/ICS cybersecurity policies, standards, procedures, and job aids.
• Deliver training and awareness programs for client personnel, including plant operators, engineers, and third-party vendors.
• Advise clients on governance frameworks and best practices for OT/ICS cyb