A Snapshot of Your Day

In this role, you will analyze and assess SCADA/OT, factory, and IT system architectures from a security‑by‑design perspective. You will identify architectural risks, evaluate compliance with international standards, and translate complex security concepts into clear recommendations for both technical teams and management, helping to design secure and resilient industrial systems in an international environment.

How You’ll Make an Impact

• Analyze and evaluate complex SCADA/OT, Factory and IT system architectures from a security-by-design perspective, covering networks, zones and conduits, components, interfaces, and operational processes.
• Assess whether existing or planned architectures adequately address threat scenarios, attack paths, trust boundaries, and defense-in-depth principles, and identify gaps and improvement measures.
• Evaluate compliance of architectures and security concepts with international standards and regulations, e.g. IEC 62443, NIST, NERC-CIP, CRA (e.g., zoning, security levels, secure communication, lifecycle requirements).
• Explain architectural security risks, design trade-offs, and recommendations to technical experts as well as to management, and support root-cause analysis and lessons learned.

What You Bring

• A minimum of bachelor’s degree in information technology, Computer Science, Engineering, or a related field; a specialization in cybersecurity or industrial automation is a plus.
• More than three years of experience in security architecture, system design, or technical security consulting in OT, SCADA, or industrial environments.
• Strong understanding of industrial architectures (e.g., control systems, field devices, networks, remote access, monitoring, safety interfaces) and their security implications.
• The ability to present and explain complex architectural and security concepts clearly to both management personnel and technical experts.
• As you act in an international environment, you bring fluent English language skills (including security terminology) both verbal and written; proficiency in German is a plus.
• In-depth knowledge of IEC 62443 (concepts, roles, security levels, lifecycle phases) and practical experience applying it to real-world systems.
• Experience bridging OT and IT security, including demilitarized zones, remote maintenance, cloud connectivity, and corporate integration.
• Familiarity with threat modeling methods, risk assessments, and security concept development.

About the Team
Our Global Functions play a key role in advancing the company's central initiatives and maintaining operational excellence across different groups, business areas, and regions. These roles support our vision to become the most valued energy technology company in the world. As part of our team, you supply to our vision by shaping the global energy transition, partnering with our internal and external collaborators, and conducting business responsibly and in compliance with legal requirements and regulations.