OT Network Segmentation & Security Architect || Florenceville, Canada - Onsite || Fulltime FTE

OT Network Segmentation & Security Architect
Location: Florencevile, New Brunswick, Canada
Work Arrangement: Onsite
Employment Type: Full-Time FTE

Job Summary

We are seeking a senior OT (Operational Technology) Network Segmentation & Security Architect with deep experience in industrial/manufacturing environments, OT cybersecurity, identity and access management, cloud operations, and operational service transition.

The ideal candidate will combine strong hands-on OT technical expertise with operational architecture, governance, service management, and stakeholder leadership capabilities. This role will be responsible for ensuring OT solutions are secure, operationally ready, supportable in production, and scalable across manufacturing plants.

Must-Have Technical/Functional Skills

OT Operations & Manufacturing Systems
10+ years of experience supporting industrial or manufacturing environments
Strong hands-on experience with SCADA, HMI, Historian/PI systems, FactoryTalk, ThinManager, and OT infrastructure
Experience with OT virtualization, backup/recovery, and industrial networking
Strong understanding of plant-floor/OT operational environments and manufacturing systems

OT Cybersecurity
Strong knowledge of OT cybersecurity principles and ISA/IEC 62443 standards
Experience with OT network segmentation and secure architecture
Experience working with SOC teams, incident response, and cybersecurity operations
Experience with secure remote access and Privileged Access Management (PAM)
Knowledge of Zero Trust security controls and OT security practices

Identity & Access Management (IAM)
Hands-on experience with Active Directory (AD), Group Policy, DNS, and DHCP
Experience with Microsoft Entra ID, MFA, and Conditional Access
Strong understanding of enterprise IAM operations
Experience with IT/OT identity separation is highly desirable

Cloud & Azure Operations
Working knowledge of Microsoft Azure infrastructure and cloud operations
Experience with Azure Landing Zones, subscriptions, policies, and vWAN
Understanding of cloud operations and support models
Ability to define operational runbooks, procedures, and support frameworks for Azure platforms

GitOps & Automation
Working knowledge of Git-based workflows and GitOps operating models
Experience with pull requests, branch protection, approval gates, and controlled deployment processes
Ability to design and document operational procedures for GitOps-driven identity and infrastructure management

Roles & Responsibilities

1. Operational Readiness & Service Transition
Own operational readiness for OT solutions and ensure production supportability
Define operational acceptance criteria, transition plans, and service-readiness requirements
Lead hypercare activities through successful transition to Business-as-Usual (BAU) operations

2. OT Service Management Framework
Design and implement OT-specific ServiceNow processes
Establish workflows for Incident, Request, Access, Change, Problem, and Knowledge Management
Ensure OT service management processes align with enterprise standards and operational requirements

3. OT Support & Service Coverage Model
Develop the OT support operating model, including business-hours support and on-call escalation
Define SLAs, escalation procedures, incident response processes, and support responsibilities
Develop a future-state 24x7/follow-the-sun support model

4. Operational Governance & Reporting
Define governance structures, RACI matrices, escalation paths, KPIs, and operational dashboards
Establish service review processes and operational reporting
Ensure complete operational visibility through ServiceNow

5. Identity, GitOps & Cloud Operationalization
Convert OT identity, GitOps, and Azure platform designs into sustainable operational procedures
Develop runbooks, monitoring requirements, support processes, and operational controls
Ensure solutions are scalable, supportable, and aligned with enterprise standards

6. Monitoring, Incident Readiness & Cybersecurity Response
Define monitoring and alerting requirements for OT environments
Establish alert ownership, incident workflows, and escalation procedures
Coordinate incident readiness across OT, SOC, infrastructure, and cybersecurity teams

7. Plant Onboarding & Hypercare
Develop a repeatable OT plant onboarding framework for global deployment
Create readiness checklists, deployment standards, stabilization procedures, and hypercare processes
Capture lessons learned and continuously improve the plant rollout model

8. OT Operations Architecture & Stakeholder Leadership
Act as the OT Operations authority within the program team
Provide operational architecture guidance and influence solution design decisions
Identify and challenge solutions that are not operationally viable or supportable
Coordinate across OT, IT, cybersecurity, infrastructure, plant operations, and service management teams
Ensure OT operations are scalable, secure, and supportable across the organization

Generic Managerial Skills

Strong stakeholder management and communication skills
Operational governance and service transition experience
Resource planning and operational leadership
Strong problem-solving and decision-making abilities
Experience managing cross-functional technical teams and stakeholders
Continuous improvement and process optimization mindset
Ability to operate effectively in complex industrial/manufacturing environments

Preferred/Additional Skills

ServiceNow ITSM/ITOM experience
Experience with OT/IT convergence programs
Experience implementing OT network segmentation initiatives
Experience with manufacturing plant technology transformations
Knowledge of Zero Trust architecture and cybersecurity frameworks
Experience working with managed service providers (MSPs)
Experience supporting large-scale/global OT transformation programs