IT/OT Architect

About the Role

We are seeking an experienced IT/OT Architect with hands-on expertise in vulnerability management and security monitoring onboarding to design, implement, and operationalise security across converged IT and Operational Technology (OT) environments. This role will own the architecture and onboarding of IT and OT assets into vulnerability management and security monitoring platforms (SIEM/SOC and OT network monitoring), ensuring full asset visibility, risk-based remediation, and effective threat detection across industrial and enterprise estates.

Key Responsibilities

• Design and maintain secure IT/OT architectures, including network segmentation, zones and conduits, and IT/OT DMZs aligned to the Purdue Model and IEC 62443
• Lead the design and rollout of vulnerability management programmes across IT and OT, covering asset discovery, passive and OT-safe active scanning, risk-based prioritisation, and remediation tracking
• Define OT-safe vulnerability assessment approaches and compensating controls where patching of PLCs, DCS, HMIs, and legacy systems is not feasible
• Plan and execute the onboarding of IT and OT assets, log sources, and network sensors into SIEM/SOC and OT monitoring platforms (e.g. Splunk, Microsoft Sentinel, QRadar, Claroty, Nozomi, Dragos)
• Define log source standards, data collection architecture, parsing/normalisation requirements, and detection use-case coverage for IT and OT environments
• Work with SOC teams to develop OT-aware detection use cases, alert tuning, escalation paths, and response playbooks
• Establish KPIs and reporting for vulnerability remediation, asset coverage, and monitoring onboarding progress
• Collaborate with plant/site engineering, infrastructure, and network teams to deploy scanners, sensors, and collectors without disrupting operations
• Ensure alignment with regulatory and compliance frameworks (IEC 62443, NIST CSF, NIST 800-82, NIS2, ISO 27001)
• Produce architecture documentation, onboarding runbooks, and technical roadmaps, and present progress to technical and senior stakeholders

Required Skills & Experience

• 7+ years in IT/OT security architecture or engineering, with strong grounding in network security (routing, switching, firewalls, VPNs, network segmentation)
• Proven hands-on experience delivering vulnerability management programmes using tools such as Tenable (incl. Tenable OT), Qualys, or Rapid7, including risk-based prioritisation and remediation governance
• Proven experience onboarding assets and log sources into security monitoring platforms (SIEM/SOC) such as Splunk, Microsoft Sentinel, QRadar, or similar
• Hands-on experience with OT visibility and threat detection tools such as Claroty, Nozomi Networks, Dragos, Armis, or Microsoft Defender for IoT
• Solid understanding of OT/ICS/SCADA environments, industrial protocols (Modbus, DNP3, OPC-UA, Profinet), and the operational constraints of production environments
• Deep understanding of IEC 62443, NIST 800-82, and Purdue Model architecture
• Relevant certifications preferred: CISSP, GICSP, GRID, CCNP Security, or vendor certifications (Tenable, Splunk, Claroty/Nozomi)
• Strong stakeholder management skills — able to communicate with both engineering/plant teams and security leadership
• Excellent English communication skills, written and verbal

Nice to Have

• Experience in manufacturing, pharmaceutical, energy/utilities, or critical infrastructure environments
• Experience building or maturing SOC processes, including IT/OT SOC integration
• Familiarity with EDR platforms (e.g. CrowdStrike, Microsoft Defender) and CMDB/asset inventory integration (e.g. ServiceNow)
• Prior consulting or client-facing project experience

Employment Details:

Salary: Competitive Market Rate

Start date: Immediately

Location: Poland

Job type: Full-time or Contractor /Remote with occasional travel to client sites

About London Strategy:

We are a management and IT consulting firm based in London with vast experience in M&A, IT, and transformation services. Our team transforms complexity into priority actions, a clear timeline, and executive decisions supported by appropriate governance. You will be able to work with senior advisors with Big 4 and top-tier advisory firm backgrounds. Our success comes from a shared belief in rolling up our sleeves, working hard to solve complex challenges, executing plans, and implementing technology to help transform organizations. As we continue to grow and deepen our impact on organizations worldwide, we seek the right people to join us on our mission.

Recruitment Process: If the position interests you, please apply now. We will send you a confirmation of acknowledgment. Upon successful selection for an interview, the process will occur in the following three stages:

• First Stage: An initial video call with a senior member to go through background and experience about the role.
• Second Stage: A follow-up discussion with a panel of senior leadership team to go through background and experience about the role.
• Final Stage: This will be a final interview with a partner within the company