OT System Architect at Chemtrade… · Californi…

Job Description

Position: OT System Architect

Primary Location: Home Based within Canada or US (with 50% travel required)

Reports To: Senior Manager, Electrical Reliability

Compensation: $150,000 - $160,000 USD ($180,000 - $190,000 CDN) + bonus + benefits

Salary ranges are determined by role, level, and location. The range reflects the minimum and maximum target for new hire salaries for the position. Within the range, individual pay is determined by work location and additional factors, including job related skills, experience, and relevant education or training. More specific salary range for your preferred location can be discussed during the hiring process. Please note that the compensation details listed reflect the base salary only, and do not include bonus, benefits, pension contributions or additional incentives.

Chemtrade is committed to delivering innovative solutions that address the complex challenges faced by our customers. As a responsible corporate citizen, we prioritize safety, sustainability, and environmental stewardship in all aspects of our operations. Our talented and diverse workforce is at the heart of our success, as we recognize that their knowledge, skills, and dedication drive our ability to deliver exceptional products and services. At Chemtrade, we believe in creating an environment where everyone feels valued, respected, and empowered to contribute their unique perspectives and talents. By putting people at the center of our operations, we build strong connections, nurture innovation, and create a fulfilling work experience for all.

About This Role and About You

The OT Architect will play a key role in designing and supporting secure OT networks across Chemtrade’s manufacturing facilities. This role focuses on strengthening the reliability of OT network, OT/IT network segmentation, and cybersecurity controls in alignment with industry standards (ISA, NIST, NERC IP etc). The architect will work closely with the Lead to implement Chemtrade’s OT Cybersecurity Program, while supporting connectivity and security for PLC, DCS, BMS, and SIS systems across CHEMTRADE facilities.

Job Duties and Responsibilities:

• Design and deploy security solutions to protect OT systems against cyber threats, including firewalls, intrusion detection/prevention systems, and endpoint security software.
• Implement Chemtrade’s OT Cybersecurity Program, including network design, segmentation, and monitoring across plant environments.
• Design, configure, and maintain Cisco network devices (switches, routers, VLANs, wireless controllers) and Firewalls in OT networks.
• Manage and administer firewalls (WatchGuard, Fortinet, Palo Alto) to protect OT environments, OT DMZs, and remote access connections.
• Design, configure, and implement OT DMZ
• Manage OT AWS Network
• Implement Purdue Model–aligned network segmentation (ISA-95/ISA 62443, NIST SP 800-82) to separate IT, OT DMZ, and plant levels.
• Collaborate with IT, Corporate Electrical Reliability and Site teams to securely integrate IT, PLC (Programmable Logic Controllers), DCS (Distributed Control Systems), BMS (Burner Management System (BMS), SIS (Safety Instrumented Systems) with OT networks.
• Support and implement secure vendor and remote access solutions (VPN, jump hosts, MFA)
• Assist with asset inventory, vulnerability management, intrusion detection, and incident response in OT systems (e.g., Claroty, Palo Alto, SIEM).
• Monitor and optimize network performance, troubleshoot issues, and maintain high system availability.
• Maintain network diagrams, architecture documentation, and configuration standards for all OT environments.
• Contribute to OT risk assessments, audits, and disaster recovery planning.
• Provide technical support for OT networking issues across multiple Chemtrade sites.
• Establish and manage Process Control Network(PCN) network Domains and user access
• Work with IT infrastructure team to integrate, implement, and maintain security tools in OT environments across the plants.
• Work with third-party vendors and contractors to ensure that their systems and services are secure and compliant with company policies.
• Maintain up-to-date knowledge of industry best practices, new security threats, and emerging technologies to ensure OT security measures are effective and current.
• Collaborate with IT and engineering teams to ensure that OT systems are integrated with the overall IT infrastructure in a secure and compliant manner.
• Analyze, troubleshoot, and investigate security related incidents, events, and alerts using proper tools or even manual techniques.
• Provide support for audit and remediation activities as required.\
• Manage the process of gathering, analyzing and assessing the current and future threat landscape, as well as providing a realistic overview of risks and threats in the operational environment.
• Assist in the development of training, procedures, and documentation for internal and external audiences.
• Strong knowledge supporting and troubleshooting network assets.

Minimum Position Qualifications/Requirements:

• Bachelor’s degree in Electrical/Electronics, Computer Science, Information Technology
• Relevant certifications such as CCNA/CCNP, GICSP, Fortinet NSE, Palo Alto PCNSE are preferred.
• 7+ years of experience in designing, developing and maintaining industrial OT/ICS network infrastructure.
• Solid understanding of Purdue Model and OT network zoning.
• Understanding of cybersecurity frameworks (NIST SP 800-82, NIST CSF, IEC 62443, CIS Controls).
• Experience in MS operating sytems, MS Server, MS Hypervisor,
• Knowledge of deploying the networking associated with enterprise Process Historians such as Aveva P or Canary.
• Hands-on experience with Cisco network devices (switches, routers, VLANs, routing protocols), firewalls (WatchGuard, Fortinet, Palo Alto), VPN, DMZ, and secure remote access.
• Knowledge of PLC, DCS, BMS and SIS architecture and their integration with OT networks preferably Rockwell, Emerson, Honeywell, ABB.
• Familiarity with industrial protocols (Modbus, DNP3, Ethernet/IP, OPC UA, PROFINET).
• Familiarity with asset management and monitoring tools (e.g., Claroty, Nozomi).[CH1.1]
• Knowledge of AWS Cloud (including EC2, S3 and VPC) and Hyper-V virtualization.
• Knowledge of Domain Controllers and Active Directory in a Windows environment and integration with network devices
• Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams
• Safety-first mindset when working in chemical plant environments.
• Effective communicator with both technical and non-technical audiences.
• Flexibility to travel (~25%) to Chemtrade plant sites
• Experience in deployment of security controls in endpoints, industrial networks, including network zoning, segmentation and isolation designs and implementation.
• Understanding of general cybersecurity frameworks (ISO IEC 27001/27002, ISO 15408, NIST Cybersecurity Framework (CSF), NIST SP800-53)
• Hands on implementation experience of current and emerging state-of-the-art OT systems technologies, architectures, and products.
• Knowledge of ISA/IEC 62443 Cybersecurity,
• Ability to collaborate effectively at all levels and functions.
• Strong organizational skills.
• Self–starter with ability to work as part of a team.
• Excellent time management and analytical skills.
• Ability to learn new processes and technologies quickly

Embracing Diversity, Maximizing Results

At Chemtrade we are committed to cultivating a work environment that embraces and values the unique qualities, skills, and experiences of every employee. We believe in harnessing the richness of diverse talents, ideas, backgrounds, experiences and perspectives to drive our business forward, and see our diversity as one of our greatest strengths.

To foster an inclusive environment, we actively encourage the creation of Employee Resource Groups (ERGs), which are open to all employees. These employee-driven groups provide platforms for employees to share their perspectives, contribute their ideas, and help shape our inclusive and respectful culture and provide vital platforms for employees to connect, share experiences, and celebrate their unique backgrounds and perspectives. Together, we strive to build a workplace that recognizes and celebrates the diverse voices within our organization. We recognize the value of Employee Resource Groups (ERG’s) in fostering an inclusive and supportive work environment.

Join us in our journey towards building an inclusive workplace that promotes the personal and professional development of our employees.

Additionally, we understand the importance of work-life balance and the well-being of our employees and their families. That is why we proudly offer a range of family-friendly benefits, and opportunities for career growth and advancement.

We are committed to supporting our employees at every stage of their lives and ensuring they can thrive both professionally and personally. Join us and be a part of a company that values diversity, inclusion and the well-being of its employees

Learn more about Chemtrade by following us on LinkedIn or Facebook and check us out on YouTube: Chemtrade

#LI-POST

#Chemtrade123