Principal OT Cybersecurity / ICS Security Architect

• U.S. Citizenship and the ability to obtain and maintain a Public Trust determination and PIV credential for unescorted access to the customer facility.
• Bachelor's degree in Computer Science, Computer or Electrical Engineering, Cybersecurity, or a related technical discipline, and 12+ years of progressive systems architecture or cyber engineering experience; in lieu of a degree, 16 years of relevant experience will be considered.
• Demonstrated systems-architecture experience across both operational technology (OT / ICS) and enterprise information technology (IT) security environments.
• Direct experience in the electric-utility or power-grid domain (utility, ISO / RTO, generation / transmission / distribution operator, DOE laboratory, or comparable critical-infrastructure operator).
• Hands-on experience applying NERC CIP standards (CIP-002 through CIP-014) in a utility environment.
• Proven record leading the full RFI and vendor-evaluation lifecycle: requirements, market survey, RFI authorship, response evaluation, lab validation, and recommendation.
• Strong technical writing and executive-briefing skills.
• Ability to travel domestically up to 25%, including routine trips to the Pacific Northwest.
• Working familiarity with FISMA controls and CISA Zero Trust Architecture mappings.
• Depth in one or more component domains: identity and access management; network detection and monitoring; packet capture and data diodes; cyber-asset and configuration management; or vulnerability and patch management for embedded devices.
• Experience authoring alternatives analyses under a formal systems-lifecycle methodology (utility SLC, DoDAF, NIST RMF, or comparable).
• Industry certifications such as GICSP, CISSP, GRID, CISA, or NERC-CIP-focused credentials.
• Experience presenting to federal or utility executive steering committees.
• Comfort operating under federal market-research guardrails (open information exchange with vendors; no NDAs; no procurement commitments).
• Experience with privileged access management (PAM) solutions.
• Experience with log and traffic monitoring systems supporting power protection, SCADA, and telecommunications environments.
• Experience with configuration management systems for power protection, SCADA, and telecommunications environments.

WORKING CONDITIONS

• Location / posture: Remote (U.S.-based); fully remote day-to-day.
• Travel: Up to 25% domestic; routine trips to the Pacific Northwest; periodic trips to the Peraton Labs ICS Lab in New Jersey.
• Schedule: Standard business hours, with occasional evening or weekend work during lab test windows or scheduled vendor demonstrations.
• Customer interaction: Frequent — requirements workshops, vendor engagements, steering-committee briefings. Requires professionalism, strong communication, and resilience in multi-stakeholder consensus-building.
• Onboarding: Background check, PIV credential, and customer-required training must be completed prior to unescorted facility access.