Principal OT Cybersecurity – ICS Security Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee comprehensive solutions analysis for one or more workstreams within modernization programs.

• Gather and confirm requirements effectively.

• Create System Requirements Specifications (SRS) that align with NERC CIP, FISMA, and CISA Zero Trust Architecture.

• Perform market research to identify potential commercial products related to identity and access controls, network monitoring and threat visibility, as well as inventory, configuration, and vulnerability management.

• Prepare Requests for Information (RFIs), manage the timeline for vendor responses, and lead technical discussions with bidders.

• Evaluate vendor submissions and product capabilities against specified requirements.

• Write comparison reports and provide recommendations for down-selection.

• Develop lab test environments and create testing plans.

• Supervise hands-on product demonstrations and assessments at both customer sites and Peraton Labs facilities.

• Create Alternative Solutions Analysis (ASA) documents.

• Present findings to steering committees and executive decision-makers.

• Lead multi-stakeholder workshops across Operational Technology (OT) and enterprise IT cybersecurity sectors.

• Collaborate with customer engineering, operations, cybersecurity, testing and evaluation teams, Peraton Labs engineers, and technical writers.

⛳️ Requirements

• Must be a U.S. Citizen.

• Capable of obtaining and maintaining a Public Trust determination and PIV credential.

• Bachelor's degree in Computer Science, Computer or Electrical Engineering, Cybersecurity, or a related technical field, combined with 12+ years of progressive systems architecture or cyber engineering experience; alternatively, 16 years of relevant experience will be accepted.

• Proven experience in systems architecture within both operational technology (OT / ICS) and enterprise information technology (IT) security realms.

• Direct experience in the electric utility or power grid sector.

• Practical experience implementing NERC CIP standards (CIP-002 through CIP-014) within a utility context.

• Demonstrated ability to lead the complete RFI and vendor evaluation process.

• Strong skills in technical writing and executive briefings.

• Willingness to travel domestically up to 25%, including regular trips to the Pacific Northwest.

• Familiarity with FISMA controls and CISA Zero Trust Architecture mappings.

• Expertise in one or more component domains: identity and access management; network detection and monitoring; packet capture and data diodes; cyber-asset and configuration management; or vulnerability and patch management for embedded devices.

• Experience in authoring alternatives analyses following a formal systems lifecycle methodology.

• Relevant industry certifications such as GICSP, CISSP, GRID, CISA, or NERC-CIP-focused credentials.

• Experience presenting to federal or utility executive steering committees.

• Comfortable working within federal market research guidelines.

• Familiarity with privileged access management (PAM) solutions.

• Experience with log and traffic monitoring systems that support power protection, SCADA, and telecommunications environments.

• Background in configuration management systems for power protection, SCADA, and telecommunications environments.

• Background check, PIV credential, and any required customer training must be completed prior to unescorted facility access.

🏝️ Benefits

• Fully remote work on a day-to-day basis.

• Eligibility for overtime may apply.

• Shift differentials may apply.

• Discretionary bonuses may be available.

• Standard business hours.

• Professional exposure to federal clients, utility stakeholders, vendor interactions, and executive steering committees.