Cyber Architect - OT Cyber

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!

Job Description

Job Purpose

• Deliver & execute the assigned project on time with good quality, cost effectiveness and customer satisfaction.
• Ensure technical deliverables matches project / work package requirements. Save engineering cost for the projects through application & technical expertise.
• Ensure site activities are completed as desired by customer and in specified time frame.

Your Responsibilities:

• Willingness to travel 30-40% at sites (majorly domestic) for data collection, interviewing customers and troubleshoot/ rectify the issues.
• Deliver and accomplish the assigned projects on time with good quality/ cost effectiveness and customer satisfaction
• Have to provide process domain guidelines and solutions following the Industry standards.
• Will be required to interact with the Project Managers in the region for delivering the project engineering services.
• Will be required to carry out / supervise / monitor and implement the complete project execution.
• Has to Manage multiple project deliveries with the complete process adherence, meeting or improving and quality requirements with all the possible value additions.
• Coach other project engineers
• Work with PM for scope management, including WBS development
• Participate in resolving escalations related to engineering execution and collaborate with regional team members for proper closure including lesson learnt sessions
• Provide support to the regions on any large project pursuits.
• Ensure escalation wherever required to the right partners for the benefit of the project execution.
• Work with PM for scope management, including WBS development
• Keep improving self-engineering capabilities and exchange best practice with other team members to improve team's capabilities.
• Provide Technical expertise to the team regarding quality auditing, technical issues
• Maximise reusable standard product and engineering in project delivery.
• Work with Team Leader to manage technical risk in project.
• Work with Team Leader to achieve customer acceptance. Demonstrate application and technical expertise to achieve repeat orders and retain customer satisfaction.

Oversee

• Ensure 100% meet technical items defined in project / work package.
• Ensure project implementation follows the procedure of RA engineering standards.
• Maximise reusable standard product and engineering in project / work package delivery.
• Support Team Leader in managing team performance, develop self and team capability and motivate the team.

The Essentials - You Will Have:

• Conduct risk assessments for OT systems (e.g., SCADA, PLCs, DCS)
• Develop and implement OT-specific GRC frameworks
• Ensure compliance with standards like IEC 62443, NIST CSF, and ISO 27001
• Creating Business Continuity, Incident Response, Disaster Recovery plans & procedures.
• Collaborate with cybersecurity teams to align OT and IT governance.
• Advise on regulatory requirements (e.g., NERC CIP, GDPR, local safety laws)
• Support audits and incident response planning for OT environments
• Deliver training and awareness programs for OT personnel
• Understand routing and segmentation concepts like VLANs.
• Technical knowledge of firewalls, IDS and similar.
• Technical knowledge of OT technologies, networking, and protocols.
• Understand an OT environment (common OT areas, personnel involved, OT constraints, etc.).
• Being able to "explore" the customer main systems under consideration.
• Understand basic OT flows: client-server, user operativity, user permissions, etc.
• Basic knowledge about different OT vendors (Siemens, ABB, Schnieder, Mitsubishi, etc.)
• Understand a network diagram being able to identify the different assets and understand, on a high level, how are they connected.
• Identify network equipment being able to identify a switch, wireless Access Points, routers, net diodes, and firewalls.
• Identify and trace physically connected assets and documenting them in a network topology.
• Extract switches configuration & capture traffic.
• Understand general system configurations like O.S group policy, VMs, update mechanism, etc.
• Being able to identify potential vulnerabilities and threats.
• Being able to identify current installed countermeasures/controls including, monitoring, end points security solutions, hardening measures (antivirus/EDR, GPO) etc.
• Experience creating ICS security monitoring and remediation policies using industry-standard reference architecture mapping such as the IEC62443
• Experience with monitoring, analysing, and understanding log sources for threat hunting (Good to have).
• Knowledge of common system exploits, network attacks, phishing techniques, and malware. (Good to have)
• Be able to work in a global environment, with virtual teams and customer sites.

EDUCATIONAL QUALIFICATIONS

• Bachelor's degree in Electrical engineering, Industrial Engineering, Computer Science or Information Technology or related technology-driven degree. If no degree, 15+ years of experience in Manufacturing Control Systems, Network Engineering, and Industrial Security Controls.
• Security certifications such as IEC 62443, CISSP, GISP, CSSK, CISM
• Cybersecurity Master's Degree (Good to have)
• 10+ years of hands-on experience creating ICS security monitoring and remediation policies using industry-standard reference architecture mapping such as the IEC62443.
• Configure IT/OT network infrastructure equipment (Cisco Switches, Virtual Server Environments, Cisco ASA)
• Experience with AV, EDR, NAC or similar (Good to have)
• Travel Requirements

Flexibility for travel 30% - 40% is required and can include both domestic and international trips.

Benefits:

• We provide a working environment with a creative company, paired with a great compensation package, great benefits, and a supportive atmosphere where you can sharpen with new challenges and development opportunities.
• Hybrid work-from-home and at a determined Rockwell Automation facility.
• Corporate Social Responsibility opportunities,
• Support from our 24/7 employee assistance program.

We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace.

At Rockwell Automation we are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right person for this or other roles.

#LI-Hybrid #LI-PS2

Rockwell Automation’s hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.