OT Cyber Solution Architect

Salary: £38,000 - 68,000 per year

Requirements

• Proven track record as a Cyber Security Architect working natively within safety-critical industrial environments such as Utilities, Water, Energy, Oil and Gas, or Rail.
• Direct experience writing production-grade High-Level Designs (HLDs) and Low-Level Designs (LLDs), and conducting successful Proofs of Concept (POCs) for security tooling.
• Deep architectural knowledge of at least two of the following: FortiNAC, Claroty, SentinelOne, or Microsoft Defender for Endpoint (MDE).
• Strong understanding of OT network security segmentation principles, including the Purdue Model.
• Familiarity with industrial standards such as IEC 62443 or the NCSC CAF.

Responsibilities

• Take complete technical ownership of a major Zero Trust architecture rollout across a complex, safety-critical OT environment.
• Own the full Zero Trust architecture and design lifecycle from initial requirements gathering and POCs through to rollout, deployment, and BAU transition.
• Lead dedicated OT teams and Subject Matter Experts, providing clear technical and design direction.
• Produce High-Level Designs (HLDs) and Low-Level Designs (LLDs) for a secure, scalable, and resilient OT security fabric.
• Create comprehensive testing plans and strategies.
• Complete change impact assessments to support safe, non-disruptive deployment in safety-critical industrial environments.
• Implement NAC across Layer 2 switches to support device authentication, posture checking, and dynamic access control and segmentation without disrupting operations.
• Deploy behavior-based threat detection safely within constrained, legacy OT hardware environments.
• Establish perimeter threat detection, continuous visibility, and native SOC integration.

Technologies

• Architect
• Fabric
• FortiGate
• Hardware
• Support
• Network
• Security
• Exposed

More

We are seeking a reliable, approachable, responsive, and hands-on OT Cyber Solution Architect to lead a major Zero Trust architecture rollout in a complex, safety-critical Operational Technology environment. This is an initial 6-month contract based in Reading, operating inside IR35, with an immediate start. The programme spans three core workstreams: Network Access Control using FortiNAC, Endpoint Detection and Response using SentinelOne and Microsoft Defender for Endpoint, and Network Detection and Response / OT visibility using Claroty, FortiGate, FortiGuard, and FortiNAC. We offer the opportunity to provide technical leadership across a heavily federated estate and to shape solutions that are practical, deployable, and aligned to operational and plant-floor constraints.

last updated 28 week of 2026