Key Responsibilities
Responsibilities include but are not limited to:
Network Architecture & Segmentation
- Define and own secure OT network architecture aligned to IEC 62443 zone and conduit models utilising firewalls and data diodes.
- Establish defense‑in‑depth architecture across OT, IT/OT DMZ, safety systems and remote access zones.
- Define secure connectivity for OT–IT, OT–Cloud and vendor integrations.
- Review and approve OT network changes for cyber‑physical risk impact.
- Integrate identity‑aware networking and Zero Trust principles where operationally feasible.
- Oversee firewall rule lifecycle management, including review, validation, documentation and periodic recertification.
- Ensure firewall configurations support deterministic traffic, legacy protocols and high availability requirements in OT environments.
Remote Access (Internal & Third Party)