Senior IT/OT Cyber Solution Architect

Job Description

Job Description

About Stellix

The Stellix Group of companies share a common mission of providing transformative solutions at the intersection of science and technology that enable our customers to deliver a healthier and more sustainable future. Our unique portfolio of companies is focused on helping life sciences and industry manufacturers build, connect, and transform operations and IT to make real progress in breakthrough therapeutics, food, energy, and more.

Here’s What You’ll Get

• Highly competitive Medical, Dental, and Vision Insurance
• Flexible Spending or Health Savings Accounts
• Unlimited Vacation Time
• 10 Paid Holidays
• 12 Paid Weeks Maternity Leave
• Pet Insurance
• Retirement Savings: 401(k) and Employee Stock Ownership Plan
• Employee Referral Bonus
• Professional Development Reimbursement
• Company Paid STD, LTD, and Life Insurance

Role Overview

The Senior IT/OT Solution Architect is a strategic technical leader responsible for defining, designing, and governing complex, end-to-end solutions that securely and reliably connect operational technology (OT) environments with enterprise IT systems, with a strong emphasis on IT infrastructure, virtualization, and OT cybersecurity .

In this senior role, you will:

• Own key elements of the IT/OT architecture strategy and roadmap
• Serve as the primary design authority for high-impact programs and pursuits
• Mentor other architects and engineers and uplift practices across the organization

You will function as a trusted advisor to internal stakeholders and customers, shaping solution direction, influencing investment decisions, and ensuring that solutions align with Stellix standards for security, compliance, and performance across data center, cloud, and OT environments.

Key Responsibilities

• Architecture & Design
  • Lead the definition and continuous improvement of reference architectures, patterns, and standards that span IT and OT environments (e.g., plant floor networks, DMZs, data center, and cloud).
  • Architect complex, end-to-end solutions that integrate OT systems (SCADA, DCS, PLCs, HMIs, historians, edge devices) with IT systems (enterprise applications, cloud platforms, data analytics, and security tooling), with a particular focus on Emerson DeltaV environments and their integration into broader IT architectures.
  • Own solution blueprints, logical/physical diagrams, and data flows for major programs, ensuring traceability back to business and security requirements.
  • Architect and standardize virtualized environments (e.g., VMware, Hyper-V, Nutanix) to host OT and supporting IT workloads, including high-availability, disaster recovery, and lifecycle management strategies.
• IT/OT Integration & Connectivity
  • Define and govern secure connectivity patterns between industrial assets, on-prem infrastructure, and cloud services using industry best practices (e.g., ISA/IEC 62443, Purdue Model).
  • Select and design appropriate integration mechanisms (OPC UA, MQTT, APIs, middleware, data brokers) and ensure they scale across multiple sites and programs.
  • Set standards for edge compute, gateways, and data acquisition architectures that support IIoT, advanced analytics, and future digital initiatives.
• OT Cybersecurity & Compliance
  • Champion OT cybersecurity by design in all IT/OT solutions, including network segmentation, identity and access management, secure remote access, backup/restore, and vulnerability/patch management for both IT and OT assets.
  • Partner with security, risk, and compliance leaders to interpret frameworks (e.g., ISA/IEC 62443, NIST CSF) into practical architectures and control sets for Stellix and its customers.
  • Guide the design and deployment of OT security controls such as ICS/OT network monitoring, anomaly detection, asset discovery, and security logging/monitoring integrations.
  • Play a key role in security assessments, architecture risk reviews, and incident response planning and post-incident improvement activities related to OT and industrial environments.
• Technical Leadership & Delivery Support
  • Act as the senior technical authority on complex projects and programs, guiding solution options, tradeoffs, and decisions.
  • Work closely with project managers, engineers, and operations teams to translate business requirements into clear technical designs, implementation plans, and estimates.
  • Provide hands-on architectural oversight throughout the lifecycle (design, build, test, deploy, and transition), de-risking delivery and ensuring adherence to standards.
  • Review and approve critical technical deliverables (e.g., high/low-level designs, security designs, test plans, as-built documentation).
  • Mentor and coach less-experienced architects and engineers, helping develop IT/OT and OT cyber skills across the team.
• Stakeholder Engagement, Sales Support & Consulting
  • Partner with operations, engineering, IT, and security leadership to understand strategic objectives and shape the IT/OT roadmap.
  • Support sales and business development activities as the senior technical lead: shaping solution strategies, developing architectures for key pursuits, contributing to proposals/RFP responses, and delivering customer presentations, demos, and technical workshops.
  • Lead technical workshops, discovery sessions, and assessments at customer or internal sites to uncover opportunities, constraints, and solution options.
  • Communicate complex technical concepts in clear, business-relevant language to executives, non-technical stakeholders, and technical teams.
• Standards, Governance & Continuous Improvement
  • Help define and enforce IT/OT architecture standards, design patterns, and governance processes across the portfolio.
  • Evaluate and recommend new technologies, platforms, and tools relevant to IT/OT convergence (e.g., industrial networking, edge platforms, cloud services, monitoring/observability, and security solutions), with a focus on scalability and repeatability.
  • Capture and disseminate lessons learned, best practices, and reusable components to accelerate future solution delivery and improve quality.

Required Qualifications

• Education & Experience
  • Bachelor’s degree in Computer Science, Information Technology, Electrical/Industrial Engineering, or a related field; or equivalent practical experience.
  • 10+ years of experience in IT infrastructure, systems, and/or networking roles, including 5+ years in an architecture, lead engineer, or solution design capacity.
  • Demonstrated experience leading multi-site or multi-year IT/OT programs, preferably in highly regulated or safety-critical environments.
• Technical Skills
  • Deep background in IT infrastructure and networking , including:
    • TCP/IP networking, routing, switching, firewalls, VPNs
    • Network segmentation, DMZ design, and secure remote access
    • Windows Server, Active Directory, and/or Linux server environments
  • Significant hands-on experience with virtualization and hosting platforms , such as:
    • VMware vSphere/ESXi, Microsoft Hyper-V, Nutanix, or similar
    • Designing and operating virtualized environments supporting OT/industrial workloads
    • Backup/restore, high availability, and disaster recovery strategies in virtualized environments
  • Solid working knowledge of OT environments , including one or more of:
    • SCADA/DCS systems and HMIs, with a strong preference for Emerson DeltaV experience
    • PLCs and industrial controllers
    • Industrial networks (EtherNet/IP, Modbus, PROFINET, etc.)
    • Data historians and plant-level data management
  • Proven experience integrating IT and OT systems , including:
    • OPC Classic/OPC UA, MQTT, REST APIs, or message brokers
    • Edge gateways and IIoT architectures
    • Data integration into enterprise/cloud platforms (e.g., data lakes, analytics tools)
  • Demonstrated knowledge of OT cybersecurity principles and controls, such as:
    • ISA/IEC 62443, NIST CSF, or similar frameworks
    • Identity and access management, logging/monitoring, and incident response in OT environments
    • Security tools and practices for industrial networks and control systems
• Soft Skills
  • Proven ability to lead complex solution definition and tradeoff discussions, balancing risk, cost, and value.
  • Strong executive presence and communication skills, with experience presenting to senior leadership and customer decision-makers.
  • Ability to lead and influence without direct authority across cross-functional teams (IT, OT, security, operations, and vendors).
  • Experience mentoring and developing other technical team members (architects, engineers).
  • Strong problem-solving mindset, with the ability to balance long-term architecture vision with short-term delivery constraints.

Preferred Qualifications

• Experience in one or more of the following industries: manufacturing, utilities, energy, life sciences, or other industrial/critical infrastructure environments.
• Direct, hands-on experience with Emerson DeltaV (design, implementation, migrations, upgrades, or integration with IT platforms), including leadership roles on DeltaV-centric programs.
• Familiarity with modern cloud platforms (e.g., Azure, AWS, GCP) and associated services for data, analytics, and security in an OT context.
• Hands-on experience with OT-focused security solutions (e.g., network monitoring for ICS/OT, anomaly detection, asset discovery).
• Exposure to or certification in relevant frameworks and technologies, such as:
  • ISA/IEC 62443, CISSP, GICSP, or similar cybersecurity certifications
  • TOGAF or other enterprise architecture frameworks
  • Vendor certifications (e.g., major industrial automation vendors, networking vendors, or cloud providers)
• Experience leading small architecture or engineering teams, communities of practice, or Centers of Excellence.
• Experience designing and supporting high-availability, safety-critical, or regulated environments.

Success Criteria

In this role, success will be demonstrated by:

• Consistently delivering secure, robust, and scalable IT/OT solution designs that meet stakeholder requirements and withstand audit/scrutiny.
• Reducing complexity and risk through standardized architectures , patterns, and reusable components that are adopted across accounts and programs.
• Strong collaboration and trust with operations, engineering, IT, security, and sales teams—as well as with customer technical and business stakeholders.
• Measurable contributions to improved reliability, visibility, and security across IT/OT environments, including a strengthened OT cybersecurity posture.
• Tangible impact on revenue growth and margin via strong technical leadership on key pursuits and programs.

Work Environment

• Hybrid work model with a mix of on-site presence (e.g., Foxborough area and/or customer sites) and remote work as required by project needs.
• Ability to travel occasionally to field locations, plants, or customer facilities for workshops, assessments, and implementation support.

Why Join Stellix

• Join an employee-owned organization where every team member has a direct stake in our shared success.
• Work at the forefront of Industry 5.0 , helping life sciences, energy, and industrial customers bring breakthrough science and technology to market.
• Be part of a culture grounded in our GREAT values—Generous team spirit, Radical passion for excellence, Entrepreneurial owner mindset, Always intellectually curious, and Totally customer focused.
• Access competitive compensation, comprehensive benefits, and ongoing learning and development opportunities.

How to Apply

Please submit your resume and a brief summary of relevant IT/OT architecture experience through the Stellix careers portal including:

• Examples of IT/OT architectures or integration projects you have led or significantly contributed to, especially those involving virtualization, OT cybersecurity, and/or DeltaV.
• Experience with specific OT platforms, protocols, and industries.
• Any relevant certifications or training.

Compensation: This position offers a base salary range of $155,000 to $175,000, based on experience and qualifications. The role is also eligible for a variable compensation plan.

Must be currently authorized to work in the United States.

Policy on Third-Party Unsolicited Resume Submissions: Please note that any third-party unsolicited resume submissions will immediately become the property of Stellix. Stellix will not pay any fee to a submitting employment agency, person, or entity unless a signed agreement is established.

Please Note: Stellix is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, disability, protected veteran status or any other characteristic protected by law.