OT Cyber Security Architect

JOB SUMMARY

The Operational Technology (OT) Cybersecurity Architect is responsible for defining, designing, and governing the cybersecurity architecture that protects Delek Logistics' (DKL) operational technology environments, including pipeline, terminal, storage, and industrial control systems (ICS). This role establishes the strategic direction for OT cybersecurity while ensuring industrial operations remain safe, reliable, resilient, and compliant with applicable regulatory and industry requirements.

The OT Security Architect partners with Operations Technology, Engineering, Pipeline Operations, Infrastructure, Network Engineering, Cloud Engineering, Security Operations, Enterprise Architecture, and third-party vendors to develop secure OT architectures that reduce cyber risk without impacting operational availability.

The successful candidate will possess deep expertise in industrial control systems (ICS), SCADA, industrial networking, Zero Trust for Operational Technology, and cybersecurity frameworks applicable to critical infrastructure.

EDUCATION AND EXPERIENCE

· Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Systems, Industrial Engineering, Electrical Engineering, or a related field; or equivalent combination of education and experience.

· 8+ years of experience in Operational Technology (OT), Industrial Control Systems (ICS), or industrial cybersecurity.

· 3+ years designing enterprise or industrial cybersecurity architectures.

· Experience securing pipeline, terminal, refinery, manufacturing, or critical infrastructure environments.

· Experience with SCADA systems, PLCs, HMIs, RTUs, and industrial communication protocols.

· Experience designing secure industrial network architectures.

· Experience implementing network segmentation between IT and OT environments.

· Experience working with industrial control system vendors and engineering teams.

· Experience supporting highly available operational environments where uptime and safety are critical.

PREFERRED CERTIFICATIONS

· ISA/IEC 62443 Cybersecurity Certificate

· CISSP

· Certified Information Security Manager (CISM)

· Microsoft Certified: Cybersecurity Architect Expert (SC-100)

· Cisco Certified Network Professional (CCNP) Security

· Fortinet NSE Certification

JOB REQUIREMENTS

· Develop and maintain the enterprise Operational Technology cybersecurity architecture.

· Define secure reference architectures for pipeline, terminal, storage, and industrial environments.

· Establish OT cybersecurity standards and design principles.

· Develop long-term OT cybersecurity roadmaps aligned with business objectives.

· Lead architecture reviews for OT modernization and digital transformation initiatives.

· Ensure cybersecurity controls support operational safety, reliability, and availability.

· Develop secure architectures for SCADA systems, Distributed Control Systems (DCS), Programmable Logic Controllers (PLC), Remote Terminal Units (RTU), Human Machine Interfaces (HMI), Historian systems, Engineering workstations, Safety Instrumented Systems (SIS), Industrial IoT and Edge computing platforms.

· Ensure secure integration between industrial systems and enterprise technologies.

· Define architecture standards for Industrial firewalls, Network segmentation, Industrial DMZs, Secure remote access, Jump servers, Vendor remote access, Industrial wireless networks, Layer 2 and Layer 3 segmentation, Industrial network monitoring and Secure field communications.

· Develop strategies supporting Zero Trust principles within OT environments.

· Provide architectural guidance for Industrial Intrusion Detection Systems (IDS), Network Detection and Response (NDR), OT asset discovery platforms, Industrial vulnerability management, Secure remote access platforms, OT Security Information and Event Management (SIEM) integration, Security orchestration and response for OT environments, and Passive network monitoring technologies.

· Guide implementation teams responsible for deployment and administration.

· Develop secure architectures supporting Privileged access to OT systems, OT Multi-Factor Authentication (MFA), Role-based access control, least privilege administration, Secure engineering workstation access, Authentication for industrial systems, and Identity boundaries between IT and OT.

· Perform cybersecurity architecture risk assessments for operational technology initiatives.

· Identify architectural risks associated with industrial modernization.

· Develop compensating controls where operational constraints exist.

· Evaluate cybersecurity impacts on operational reliability and safety.

· Provide architectural guidance supporting OT threat detection.

· Collaborate with Security Operations during OT security incidents.

· Support forensic investigations involving industrial systems.

· Improve visibility into industrial cybersecurity events.

· Recommend architecture improvements following incident reviews.

· Evaluate emerging OT cybersecurity technologies.

· Lead proof-of-concept evaluations.

· Present architecture recommendations to executive leadership and engineering stakeholders.

· Ensure architectural alignment with:

o NIST Cybersecurity Framework (CSF)

o ISA/IEC 62443

o SOX

o CIS Critical Security Controls

· Partner closely with Enterprise Architecture, Infrastructure Services, Network Engineering, Cloud Engineering, Security Operations, Identity & Access Management, Operations Technology (OT), Refinery Engineering, Third- party vendors and Application Development.

SUCCESS MEASURES

· Highly available and resilient Operational Technology environments.

· Successful implementation of secure IT/OT architecture principles.

· Reduced cybersecurity risk across pipeline and terminal operations.

· Effective segmentation between enterprise and industrial networks.

· Increased visibility into OT assets and cybersecurity events.

· Successful completion of cybersecurity assessments and regulatory audits with minimal findings.

· Standardized OT cybersecurity architecture across DKL facilities.

· Secure modernization of industrial systems without disruption to operations.

· Improved collaboration between Cybersecurity, Engineering, and Operations teams.

· Delivery of OT cybersecurity roadmaps aligned with business strategy and critical infrastructure protection objectives.