W-2 Contract No third-party vendors or C2C arrangements. Candidates must be eligible to work on a W-2 basis. Visa transfers will be considered. Position Overview We are seeking an experienced Enterprise Security Architect to support a large-scale Advanced Distribution Infrastructure (ADI) program within the energy and utilities industry. This position will serve as the primary cybersecurity architect responsible for evaluating, designing, and overseeing security controls across enterprise IT, Operational Technology (OT), cloud, and hybrid environments. The ideal candidate will bring strong security architecture expertise, experience assessing infrastructure security risks, and a solid understanding of cybersecurity frameworks and regulatory requirements. This is a strategic and consultative role focused on security architecture, risk assessment, technical recommendations, and oversight , rather than hands-on implementation of security tools. Key Responsibilities Serve as the primary cybersecurity liaison between business units, technology teams, project stakeholders, vendors, and enterprise architecture. Design, evaluate, and maintain cybersecurity architectures, security standards, technical requirements, and reference architectures across IT, OT, cloud, and hybrid environments. Assess proposed technologies, infrastructure solutions, and vendor integrations to ensure alignment with cybersecurity policies and established security standards. Evaluate OT environments, including device connectivity, encryption, sensor configurations, data movement, and system integrations. Conduct security architecture reviews, technical risk assessments, vulnerability assessments, and threat evaluations. Identify security gaps, architectural deficiencies, and potential vulnerabilities, recommending appropriate remediation strategies. Provide guidance on cybersecurity controls, approved technologies, architectural patterns, and security best practices. Support compliance with applicable cybersecurity frameworks and regulatory requirements, including
NIST CSF, NERC CIP, ISO 27000, TSA
Security Directives, DFARS, SOX, and PCI. Collaborate with technical teams and business stakeholders to communicate security risks, compliance requirements, and recommended solutions. Develop and maintain security documentation, architectural guidelines, and technical security standards. Required Qualifications Minimum 7 years of practical technical experience in Information Security. Experience implementing cybersecurity frameworks, including NIST Cybersecurity Framework (CSF) and
ISO 27000.
Experience evaluating security controls, identifying vulnerabilities, and recommending risk mitigation strategies. Understanding of enterprise cybersecurity principles, technical security requirements, and security risk management. CISSP or another relevant information security professional or vendor certification, such as CEH, CSSA, or GIAC. Preferred Qualifications Strong background in security architecture, particularly infrastructure security across IT and OT environments. Experience securing Operational Technology (OT), Industrial Control Systems (ICS), or related industrial infrastructure. Knowledge of device connectivity, encryption, sensor configurations, data transmission, and vendor integrations. Familiarity with NERC CIP and other cybersecurity requirements applicable to regulated environments. Experience developing security reference architectures, technical standards, and architectural design recommendations. Ability to assess vendor technologies and proposed solutions against established security requirements. Excellent communication and stakeholder management skills, with the ability to work across engineering, infrastructure, risk, governance, and compliance teams. Ideal Candidate The ideal candidate is an experienced cybersecurity architect who can assess complex technical environments, identify security risks, and provide practical architectural recommendations. Candidates with experience supporting utilities, energy, industrial infrastructure, or OT environments are particularly well suited for this opportunity. This position is best suited for professionals who enjoy security architecture, technical risk analysis, and cross-functional collaboration rather than primarily hands-on security tool administration.
