Cyber Security Architect at BAE Systems, Preston, 12 Months, £60-£90 per hour

OT/CNI Architects

12 months contract

£60-£90 per hour (Inside IR35)

3 days a week on site (PR4) - Preston

Role Purpose / Overview

Specialist architects with deep capability in Operational Technology, Industrial Control Systems (ICS/SCADA), and Critical National Infrastructure. Responsible for securing safety-critical environments while maintaining operational integrity and integrating OT into enterprise security frameworks.

Key Responsibilities

• Bridge IT security and safety-critical engineering
• Secure OT and safety-critical systems without compromising operational integrity
• Integrate IT, OT and cloud environments under a consistent security approach
• Perform Zone & Conduit modelling and embed cyber controls
• Incorporate OT systems into enterprise monitoring and control frameworks
• Reduce cyber risk in high-hazard environments

Key Outcomes

• OT and safety-critical systems are secured without compromising operational integrity
• IT, OT and cloud environments are integrated under a consistent security approach
• Cyber risk in high-hazard environments is understood and systematically reduced
• OT systems are incorporated into wider enterprise monitoring and control frameworks

Technical Skills & Experience

• IEC 62443 / ISA 62443-3-2 risk assessments, Zone & Conduit modelling, control mapping
• Secure-by-Design across IT, OT, cloud and classified systems
• Network segmentation, secure access architecture for OT (Gigamon, Forescout)
• Integration of OT assets into SOC / SIEM (QRadar)
• Threat modelling, penetration testing oversight, vulnerability benchmarking
• PKI, identity architecture, secure cloud architecture (AWS, Azure, O365, GCP)
• Safety & security assurance case development, NIS CAF, GovAssure, MOD accreditation
• Cyber incident command, crisis management and operational readiness in high-hazard environments
• Regulator engagement (Defence Nuclear Regulator, DSA.02, ONR, NCSC)

Qualifications & Certifications

• CISSP, CEH, ISA 62443 Fundamental Specialist Certification
• AWS Security Specialist, AZ-500 (training)
• Chartered Engineer (IET), MEng Electronic Engineering
• Clearances: SC (active)