Principal Architect, Manufacturing Security (OT/ICS)

Location: USA - Remote; ability to travel 25%.

Annual salary: $150,000–$180,000, plus eligibility for bonus/incentive pay.

Company

hirify.global is a global science and technology company operating businesses across life sciences, diagnostics, biotechnology, and manufacturing.

What you will do

• Serve as the senior OT security technical resource and primary engineering contact for assigned operating companies, partnering with CIOs, IT leads, and plant engineers.
• Translate enterprise OT architecture standards into implementation plans covering firewall policies, VLAN topology, DMZ architecture, access controls, and compensating controls for legacy assets.
• Lead technical execution during network change windows and production cutovers while protecting manufacturing operations, batch processes, and automated systems.
• Deploy controlled OT remote access methods to replace legacy VPNs, direct-vendor connections, and consumer-grade tools.
• Document architecture decisions, implementation playbooks, deviation rationales, and as-built network diagrams.

Requirements

• Hands-on experience designing and implementing OT network segmentation in live industrial environments, including VLAN architecture, industrial firewall configuration, DMZ builds, and zone-based access controls across multi-site manufacturing operations.
• Experience leading OT network change projects in production-sensitive environments, including coordination with production cycles, plant operations, and safety teams, while implementing compensating controls without unplanned downtime.
• Deep familiarity with OT/ICS components and network dependencies, including PLCs, DCS, SCADA, HMI, historian, and BMS systems, plus Modbus, Profinet, EtherNet/IP, OPC-UA, and BACnet protocols.
• Working knowledge of IEC 62443, NIST SP 800-82, and ISA-99 as applied to network segmentation and zone access controls, with hands-on experience remediating audit findings at manufacturing sites.
• 10+ years of experience in OT/ICS security engineering or industrial network engineering, including significant experience leading segmentation, firewall deployment, or OT infrastructure projects across multiple manufacturing sites simultaneously.

Nice to have

• Experience managing concurrent segmentation or infrastructure projects across multiple operating companies or plant locations with different OT environments, production constraints, and IT governance models.
• Familiarity with Claroty, Nozomi Networks, Dragos, or Armis for OT asset discovery and network visibility, including validating zone membership and access-control coverage.

Culture & Benefits

• Fully remote work arrangement from home for eligible roles.
• Comprehensive benefits including paid time off, medical, dental, and vision insurance, and 401(k) for eligible employees.
• hirify.global Business System culture focused on continuous improvement, innovation, belonging, and internal career development.
• Opportunity to work within a global life sciences and industrial cybersecurity program.