Job Summary:
The Senior OT AI Cybersecurity Architect will define and implement cybersecurity requirements, reference architectures, and governance for Artificial Intelligence solutions operating across Operational Technology (OT) and Industrial Control System (ICS) environments. The role focuses on establishing secure deployment patterns for AI workloads across edge, on-premises, PCN/DMZ, disconnected, and cloud-connected environments. The architect will support AI initiatives involving computer vision, generative AI, machine learning, and agentic AI while ensuring alignment with OT security principles, cyber assurance processes, and industry frameworks. The role requires deep expertise in industrial cybersecurity and an understanding of emerging AI security risks involving non-human identities, data access, autonomous actions, model integrity, monitoring, and industrial protocol interactions.
Key Responsibilities:
• Define cybersecurity requirements and reference architecture patterns for AI workloads deployed within OT/ICS environments.
• Develop secure deployment patterns across edge, on-premises, PCN/DMZ, cloud-brokered, and disconnected environments.
• Define appropriate security zones and conduits, trust boundaries, network segmentation, and data flows for AI-enabled systems.
• Establish security requirements governing read-only versus write access, autonomous actions, and human-in-the-loop controls.
• Design architectures that support operational environments with limited or disconnected cloud connectivity.
• Develop security patterns for computer vision, machine learning, generative AI, AI agents, agentic AI, and AI-enabled industrial analytics and automation.
• Define OT security requirements for AI agents, service accounts, machine identities, and other non-human identities.
• Establish OT-specific attributes and requirements for inclusion in enterprise AI asset and application inventories.
• Define runtime security monitoring requirements for AI workloads.
• Establish requirements for model validation, model behavior monitoring, anomaly detection, and AI activity visibility.
• Integrate AI security monitoring with existing OT detection, incident response, and cyber monitoring capabilities.
• Conduct and support threat modeling for OT AI use cases and pilot initiatives.
• Participate in cybersecurity architecture reviews and cyber assurance gates.
• Evaluate AI implementations for risks involving unauthorized control or write access, model manipulation, data poisoning, prompt injection, excessive AI agent permissions, compromised non-human identities, industrial protocol manipulation, and model hallucination or incorrect interpretation of operational data.
• Develop an OT AI cyber assurance review checklist for consistent application across AI initiatives.
• Support the existing Policy 564 cyber assurance process.
• Develop and refine OT-specific AI cybersecurity guardrails in collaboration with OT cybersecurity, product, engineering, and enterprise AI teams.
• Align OT AI security controls with existing enterprise AI, AI Agent, and MCP security guardrails.
• Ensure security architecture aligns with relevant frameworks and guidance, including IEC 62443, NIST SP 800-82, NIST AI Risk Management Framework (AI RMF), and MITRE ATLAS.
• Evaluate how AI models and agents interact with industrial systems and operational data.
• Apply knowledge of industrial communication protocols, including Modbus, DNP3, and OPC UA, to identify potential security risks.
• Identify situations where AI models or agents could misinterpret, improperly modify, or manipulate industrial communications or operational commands.
• Ensure AI security controls address OT requirements related to availability, safety, integrity, deterministic operations, and production continuity.
• Assess emerging technologies designed to govern and secure AI workloads.
• Evaluate the applicability of AI Security Posture Management (AISPM) capabilities within OT/ICS environments.
• Research emerging AI security capabilities, attack techniques, monitoring solutions, and governance platforms.
• Develop a position paper outlining recommended approaches and technologies for securing AI within OT environments.
• Contribute to the organization's OT Security for AI strategy and 2027 roadmap.
• Represent OT cybersecurity in AI governance and security forums, including OT AI Steering Committee, SecureAI, and Responsible AI working sessions.
Required Qualifications:
• 7+ years of experience in cybersecurity, OT/ICS security, security architecture, or industrial control system security.
• Strong hands-on knowledge of OT/ICS architectures, network segmentation, security zones and conduits, PCN/DMZ architectures, and industrial cybersecurity controls.
• Experience designing or reviewing cybersecurity architecture for critical infrastructure or industrial environments.
• Strong understanding of industrial protocols such as Modbus, DNP3, and OPC UA.
• Experience performing cybersecurity architecture reviews, threat modeling, security assessments, and technical risk analysis.
• Understanding of AI/ML security risks, including Generative AI and AI agents.
• Experience defining security requirements for machine identities, service accounts, APIs, workloads, or other non-human identities.
• Knowledge of security monitoring, detection engineering, incident response, and runtime visibility within OT environments.
• Familiarity with IEC 62443 and NIST SP 800-82.
• Ability to translate complex cybersecurity risks into practical architecture standards, security requirements, and technical guardrails.
Preferred Qualifications:
• Experience securing AI/ML workloads within OT, ICS, critical infrastructure, manufacturing, energy, utilities, or industrial environments.
• Knowledge of the NIST AI RMF and MITRE ATLAS frameworks.
• Experience with AI Security Posture Management (AISPM), AI governance, AI security monitoring, or model security.
• Experience securing agentic AI or autonomous AI systems.
• Understanding of Model Context Protocol (MCP) and associated security considerations.
• Experience with edge AI, computer vision, industrial analytics, or disconnected AI environments.
• Experience developing reference architectures, technical standards, security patterns, or enterprise cybersecurity guardrails.
• Strong written communication skills, with experience producing architecture documentation, position papers, roadmaps, and technical recommendations.
Key Deliverables:
• Develop OT AI security reference architectures covering computer vision, generative AI, agentic AI, and edge/disconnected AI workloads.
• Define OT AI security requirements for identity and non-human identity, AI asset inventory, runtime monitoring, model validation, security visibility, and detection.
• Develop an OT AI threat model and cyber assurance checklist.
• Prepare a position paper on AI security solutions for OT, including an evaluation of AISPM applicability.
• Establish OT AI cybersecurity guardrails.
• Provide recommendations and updates for the 2027 OT Security for AI roadmap.
