OT Security Architect (Lead)

Location: Hybrid in Prague, Czechia

Company

hirify.global is an IT consultancy delivering software and technology solutions for startups, mid-sized companies, and large corporations across multiple industries.

What you will do

• Define OT cybersecurity strategy, architecture principles, governance standards, and security guidelines.
• Design network segmentation, Security Zones & Conduits, firewall architectures, and secure connectivity between OT, enterprise, and cloud environments.
• Establish OT identity, access management, and privileged access requirements.
• Conduct and support OT cybersecurity risk assessments and define vulnerability management and incident response requirements.
• Lead workshops and technical reviews with IT, OT, engineering, manufacturing, quality, and cybersecurity stakeholders.
• Lead governance discussions and architecture sign-offs while ensuring alignment with regulatory and corporate security standards.

Requirements

• Strong experience in OT/ICS cybersecurity architecture and industrial control systems.
• Hands-on knowledge of IEC 62443 and NIST SP 800-82.
• Experience with manufacturing cybersecurity and regulated manufacturing environments, ideally pharmaceuticals.
• Strong understanding of the Purdue Model, industrial DMZs, network segmentation, firewall security architecture, defense-in-depth, IAM, privileged access, and OT incident response.
• Strong stakeholder management and communication skills, with the ability to translate complex security requirements into practical architecture and standards.
• Fluent English required.

Nice to have

• Experience with pharmaceutical or GxP environments.
• Relevant OT cybersecurity certifications.
• Experience with OT/IT and cloud integration projects.
• Knowledge of vulnerability management and security monitoring tools.

Culture & Benefits

• Full-time hybrid work arrangement in Prague, Czechia.
• Work on a regulated pharmaceutical manufacturing cybersecurity project.
• Collaboration across IT, OT, engineering, manufacturing, quality, and cybersecurity functions.