Security Architect, OT
Employer · Ball Corporation
Cybersecurity specialistNetwork engineerFull-timeMakó
The OT Security Architect is responsible for designing, standardizing, and governing cybersecurity architectures for Ball Corporation's operational technology (OT) environments, including manufacturing plants, industrial control systems, and plant networks. This role ensures OT security controls are secure-by-design, operationally viable, and aligned to enterprise cybersecurity architecture, governance, and cyber defense capabilities.
Tasks
- Design and maintain OT cybersecurity reference architectures, patterns, and standards aligned to enterprise security architecture
- Define OT network segmentation, access control, monitoring, and integration patterns that balance security with safety and uptime requirements
- Partner with Cybersecurity Architecture & Engineering to ensure OT security designs align with enterprise identity, network, logging, and platform architectures
- Work with Cybersecurity Governance, Risk, and Compliance (GRC) to ensure OT architectures address identified risks, comply with enterprise standards, and support risk acceptance and exception processes
- Collaborate with Cyber Defense Operations to ensure OT environments are architected for effective monitoring, detection, and incident response
- Support OT security assessments by providing architectural analysis, gap identification and remediation design guidance
- Review plant-level designs, deviations, and exceptions to ensure architectural integrity and risk transparency
- Provide architectural guidance for OT modernization, digital manufacturing, and technology refresh initiatives
- Support regional manufacturing and engineering teams by providing OT security architecture guidance tailored to local operational constraints
- Ensure OT security architectures are applied consistently across regions while accommodating site-specific safety, regulatory, and production requirements
- Participate in regional design reviews, plant initiatives, and remediation efforts as needed
- Enable effective communication between regional OT teams and corporate cybersecurity functions regarding architectural decisions and risks
- Bachelor's degree in Engineering, Computer Science, Information Security, or a related technical discipline required
- Minimum of 8--12 years of experience in OT, industrial systems, network architecture, or cybersecurity engineering
- Demonstrated experience designing or supporting security controls in manufacturing or industrial environments
- Relevant cybersecurity or architecture certifications preferred
- Ability to translate security requirements into practical, repeatable OT designs
- Excellent collaboration skills across cybersecurity, engineering, and operations teams
- Ability to operate effectively in safety- and uptime-critical environments
- Analytical problem-solving skills in complex, constrained systems
- Clear documentation and communication skills for technical and non-technical audiences
- Strong knowledge of OT and industrial control system security principles
- Understanding of manufacturing processes, plant networks, and operational constraints
- Familiarity with OT network segmentation, remote access, and monitoring architectures
- Awareness of how OT security integrates with enterprise identity, logging, and incident response capabilities
- Understanding of how OT cybersecurity architecture impacts safety, production continuity, regulatory exposure, and business resilience
- Fluent English language