Cyber Security Architect

Work Details:

• Full Onsite in Ortigas
• Day shift schedule
• 5-year contract

OT Security Architect

I. Job Summary

The Operational Technology (OT) Security Architect is responsible for designing and delivering secure, scalable, and reusable solution architectures for the Operational Technology Advanced Metering Infrastructure (AMI) program and its related subsystems. The role ensures the confidentiality, integrity, and availability of OT environments, including AMI, while adhering to industry standards and critical infrastructure cybersecurity requirements.

This position requires deep expertise in energy utility operations, OT communication protocols, and cybersecurity frameworks specifically designed for OT and critical infrastructure environments.

II. General Responsibilities

1. Strategic and Architectural Design

• Develop OT security architectures aligned with organizational objectives, regulatory requirements, and industry best practices
• Design secure network segmentation and access control models for OT systems
• Ensure seamless integration of cybersecurity tools throughout the OT systems lifecycle

2. Architecture Risk Assessment and Compliance

• Ensure architecture designs effectively minimize risk and reduce vulnerability exposure across OT systems and IP networks
• Align security solutions with relevant industry standards, including:
• DLMS/COSEM
• ANSI C12 series
• ISO/IEC 27001
• Prepare architecture documentation and provide evidence for audits, security assessments, and regulatory compliance

3. Security Solutions Integration Design

• Evaluate, recommend, and design integration of OT-focused cybersecurity technologies, including:
• Firewalls
• Data diodes
• Intrusion Detection Systems (IDS)
• Security Information and Event Management (SIEM) solutions
• Collaborate with IT cybersecurity teams to ensure cohesive and interoperable IT–OT security integration

4. Collaboration and Stakeholder Engagement

• Work closely with internal and external OT/IT architecture and engineering teams to ensure security controls align with operational requirements
• Act as a liaison between IT and OT teams to harmonize and mature enterprise security posture
• Engage with external stakeholders such as vendors, service providers, and regulatory agencies to address cybersecurity concerns

5. Training and Awareness

• Conduct OT security architecture training for operational and engineering teams, with focus on secure and segmented OT environments
• Collaborate with Security Governance teams to strengthen cybersecurity awareness across OT and energy operations

6. Documentation

• Develop and maintain comprehensive documentation covering OT security architecture standards, guidelines, reference architectures, and supporting materials

III. Functional / Technical Competencies

• In-depth knowledge of OT communication protocols, including:
• Modbus
• DNP3
• IEC 61850
• Strong understanding of OT systems used in energy utilities, including:
• SCADA
• Energy Management Systems (EMS)
• Proficiency in cybersecurity frameworks, standards, and best practices, such as:
• DLMS/COSEM
• ANSI C12 series
• ISO/IEC 27001
• Hands-on experience with network security tools and technologies in OT environments
• Strong analytical, problem-solving, communication, and stakeholder management skills

IV. Package

• Compensation includes a fixed monthly rate, 13th month pay (pro-rated, as applicable), optional HMO, statutory government-mandated benefits, and shuttle service within the company's franchise area (subject to limited capacity).
• Employees are entitled to five (5) service incentive leaves annually after one (1) year of tenure.
• Overtime and holiday pay are not applicable.