Security Architect (Cloud, AI & OT Security)

Location: Remote-first within the United States, with periodic travel of approximately 15–20% to manufacturing facilities, data centers, colocation sites, and partner or vendor engagements. Candidates must have unrestricted authorization to work in the United States.

Company

hirify.global is a specialty chemicals manufacturer operating complex manufacturing, operational technology, enterprise IT, cloud, and artificial intelligence environments across multiple continents.

What you will do

• Own enterprise security architecture for on-premises infrastructure, identity, networks, endpoints, data centers, backup, disaster recovery, detection, and logging.
• Design Azure and AWS landing zones, identity models, network topologies, encryption, key management, guardrails, and secure hybrid connectivity.
• Develop security architectures and controls for hosted LLMs, retrieval-augmented generation, agentic workflows, AI-enabled SaaS, and AI systems used in OT and engineering contexts.
• Secure IT/OT boundaries, process control systems, industrial IoT, plant networks, vendor access, and physical security platforms.
• Maintain security standards, reference architectures, hardening baselines, roadmaps, and risk-based architectural decisions.
• Lead architecture reviews, threat modeling, vendor and M&A assessments, technical governance, and mentoring for engineers and analysts.

Requirements

• Bachelor’s degree in computer science, information security, engineering, or a related field, or equivalent practical experience.
• 8+ years of information security experience, including at least 4 years in security architecture or senior security engineering.
• Enterprise-scale security architecture experience across on-premises infrastructure and public cloud, with hands-on depth in both Azure and AWS.
• Experience with ISO/IEC 27001, 27017, and 27018, plus familiarity with ISO/IEC 42001 and AI security threats.
• Understanding of OT and industrial control systems, including ISO/IEC 27019, IEC 62443, or NIST SP 800-82 concepts, as well as physical and logical access-control integration.
• Strong identity, network security, threat modeling, architectural documentation, communication, and design-review skills.

Nice to have

• Experience in manufacturing, chemical, energy, or other process industries.
• Infrastructure-as-code and policy-as-code experience with Terraform, Bicep, CloudFormation, OPA, or Sentinel.
• Secure SDLC, application security, CI/CD security, data security, supply-chain risk, or multi-jurisdiction regulatory experience.
• Certifications such as CISSP-ISSAP, SABSA, TOGAF, Azure or AWS security certifications, GICSP, IEC 62443, or ISO/IEC 27001 and 42001 credentials.

Culture & Benefits

• Remote-first work environment with expected site travel for architecture activities that require physical and plant-level assessment.
• Opportunity to shape security architecture across enterprise IT, cloud, AI, OT, manufacturing, and physical security.
• Role authority to review, challenge, and approve designs before implementation.
• Employment requires a drug test, background investigation, and possible periodic background checks under CFATS or other applicable regulations.
• Equal opportunity employment environment.