Principal OT Security Architect

The Principal OT Security Architect is a critical position within the Digital and Tech Information Security organization, responsible for supporting our OT Manufacturing sites in maintaining the highest level of service availability and ensuring network security levels are ahead of business demands. This role will assess, improve, and maintain the network security of the global manufacturing Operations Technology (OT) environment, including Industrial Control Systems (ICS), Factory Automation systems, and other necessary systems.

• Lead all aspects of architectural activities for a technology domain or architectural practice area, or manage the development of solution architectures for projects or programs within a business area.
• Define standards and direction of architecture in the specific business or technical domain.
• Create architecture patterns to suggest the most adequate utilization of technical platforms in support of the holistic solution architecture design.
• Define, build, and evolve the Architecture Governance Framework (e.g., architecture methods, practices, and standards) for IT/IOT/OT.
• Define, design, apply, and support security controls to OT systems in our sites and own and define the architectural security standards for OT.
• Analyze, design, and develop roadmaps and implementation plans based upon a current vs future state.
• Develop and implement measures, tools, and technology to monitor compliance with company security policies and procedures, laws, and regulations.
• Lead the research and analysis of new security trends relating to OT security networks.
• Manage relationships with engineering teams and collaborate with teams across the organization to ensure network security levels are maintained at the highest level.
• Explore raw network traffic and perform in-depth data analysis utilizing various tools.
• Create useful and creative data queries and relevant dashboards and reports to key stakeholders.
• Initiate, prioritize, and design R&D work based on customer needs.
• Optimize operational excellence and ensure best practices for security are followed.
• Serve as a key thought leader, helping to maximize the value of Information Security and IT.
• Define and monitor metrics to assess the overall value/maturity of cybersecurity investments.
• Serve on various forums (e.g., Information Security/OT Lead Teams) to analyze projects, programs, and products to ensure they are technological sound, will do no harm, and will deliver the expected outcomes.

• Bachelor's degree in computer engineering, electrical engineering, computer science, or a related technical field.
• 5+ years of IT and Operational Technology Security experience with a focus on working with Industrial control system cybersecurity frameworks, such as IEC62443, NIST (CSF) Cyber Security, and SANS CIS control frameworks.
• Expertise on developing OT security programs and securing OT security network architectures.
• Solid foundation in laboratory/ICS support which was built up with IT topics like network architectures, network protocols, industrial protocols, Active Directory, backup processes, virtualization of applications, and other general IT knowledge.
• Fundamental knowledge in IT-Security threat modeling, vulnerability assessments, and pen-testing.
• Experienced in the use of tools for incident investigations, simulation, and forensics - GxP regulations.
• Ability to present technical design proposals and reports to customers and/or other senior engineering, management, and government groups in clear, complete, concise, and non-ambiguous terms.
• Excellent presentation, written, and verbal communication skills; ability to clearly communicate and have excellent consulting skills.
• Ability to undertake and complete tasks independently, meet schedules and delivery timelines, and to move swiftly from concepts and theory to action.
• Sound knowledge on Industrial Control Systems (ICS) environment including design, protocols, and integration (OT 4.0 experience).
• Firewall, Next Gen Firewalls, and security network subject matter expert (SME).

• CISSP, GICSP, CISM, or CFSE/CFSP certification preferred.
• CCIE or CCNP certification desired.
• Claroty, Zscaler, and Azure experience desired.
• Open-minded, flexible, and thrive in a highly dynamic, fast-paced, ever-changing environment.
• Exposure of onsite traveling, site audit/security audit would be plus.

This exciting opportunity offers a flexible hybrid work arrangement, allowing you to contribute from our Warren, NJ office as needed, or remote from EST or CST time zones.

We believe in an agile working culture for all our roles. If flexibility is important to you, we encourage you to explore with our hiring team what the opportunities are.

Please save a copy of the job description, as this may be helpful to refer to once the advert closes.

Haleon offers a robust Total Reward package that consists of competitive pay and a comprehensive benefits program. This includes a generous 401(k) plan, tuition reimbursement, and time off programs including 6 months paid parental leave.

On day one, you are eligible for benefits, including our healthcare programs where the company pays for the majority of your medical coverage for you and your family.

We also offer the opportunity to receive a discretionary bonus based on the achievement of key business performance and other incentive/recognition programs as part of the offering.

The salary range for this role is: $135,868 to $170,000 plus an 18% bonus.

#Li-Hybrid #LI-LC1

Care to join us. Find out what life at Haleon is really like.

At Haleon, we embrace our diverse workforce by creating an inclusive environment that celebrates our unique perspectives, generates curiosity to create unmatched understanding of each other, and promotes fair and equitable outcomes for everyone.

We're striving to create a climate where we celebrate our diversity in all forms by treating each other with respect, listening to different viewpoints, supporting our communities, and creating a workplace where your authentic self belongs and thrives.

We believe in an agile working culture for all our roles. If flexibility is important to you, we encourage you to explore with our hiring team what the opportunities are.

As you apply, we will ask you to share some personal information, which is entirely voluntary.

We want to have an opportunity to consider a diverse pool of qualified candidates and this information will assist us in meeting that objective and in understanding how well we are doing against our inclusion and diversity ambitions.

We would really appreciate it if you could take a few moments to complete it. Rest assured, Hiring Managers do not have access to this information and we will treat your information confidentially.

Haleon is an Equal Opportunity Employer and, in the US, we adhere to Affirmative Action principles.

This ensures that all qualified applicants will receive equal consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, marital status, sexual orientation, gender identity/expression, age, disability, genetic information, military service, covered/protected veteran status, or any other federal, state, or local protected class.

Please note that if you are a US Licensed Healthcare Professional or Healthcare Professional as defined by the laws of the state issuing your license, Haleon may be required to capture and report expenses Haleon incurs, on your behalf, in the event you are afforded an interview for employment.

This capture of applicable transfers of value is necessary to ensure Haleon's compliance to all federal and state US Transparency requirements.