IT Security Architect – Manufacturing

A Snapshot of Your Day

The Security Architect – Manufacturing is responsible for designing and implementing security frameworks specifically tailored for Manufacturing environment, ensuring IT security across manufacturing IT Systems, Operation Technology (OT) connectivity and compliance with industry standards. This role involves defining security architecture principles, documenting security policies, and ensuring that manufacturing systems are safeguarded against potential threats while supporting the organization’s operational goals.

How You’ll Make an Impact

• Security Architecture Development: Design security architecture for Manufacturing IT and OT connectivity aligned with policies and best practices; define authorization concept (need-to-know, least privilege); lead secure IT/OT connectivity for real-time data; advise Asset Owners on access control (RBAC), roles, privileges, and account management.
• Security Architecture for central provided Manufacturing IT systems: Architect security standards for MES and IIoT (scalable integration, secure data, centralized monitoring); support Valus Center programs MES@SE and MIT; define plant and BA-specific architecture blueprints.
• Machine Connectivity and IIoT Integration: Design secure connectivity for Manufacturing IT, OT, and IIoT; define and implement communication standards and protocols (OPC UA, MQTT) for secure, efficient data exchange.
• Consult Business Area and plant specific initiatives: Collaborate with sites to strengthen machine-to-network security; consult on secure IIoT deployments and automation; support predictive maintenance, process optimization, and energy efficiency aligned with corporate policies.
• Data Protection and Privacy: Implement data protection for sensitive product data across its lifecycle; ensure compliance with data privacy regulations in Manufacturing IT and data handling.
• Operational Security: Document operating procedures (architecture, responsibilities, change management, incident response); apply the four-eyes principle; develop incident response plans; conduct risk assessments, threat modeling, and mitigation controls.
• Compliance and Documentation: Ensure compliance with security standards and regulations; document all security processes and changes; collaborate with Asset Owners and Asset Managers on operational requirements and approvals.

What You Bring

• A bachelor’s degree in Computer Science, Information Technology, or a related field; a master’s degree is preferred.
• 7+ years in IT security, including 3+ years focused on Manufacturing IT security architecture and access control.
• Deep knowledge of Manufacturing IT security architecture, RBAC, identity management, and connectivity protocols (e.g., OPC UA, MQTT), with hands‑on work in MES/IIoT.
• Proven ability to conduct risk assessments and threat modeling, manage security incidents, and apply application security practices (OWASP, input validation, separation of data and code).
• Familiarity with ISO 27001, NIST, and Segregation of Duties (SoD); strong analytical, collaborative communication skills; and scripting to automate security tasks.
• Ability to conduct risk assessments specific to Manufacturing IT environments.
• Familiarity with Manufacturing IT security best practices and compliance requirements (e.g., ISO 27001, NIST).
• Skills in identifying and mitigating vulnerabilities in Manufacturing IT systems.
• Skills in identifying, responding to, and managing security incidents within Manufacturing IT environments.
• Knowledge of Application Security: known weaknesses (CWEs, injection flaws), good practices (separation of data and code, input validation, encoding). See OWASP project and related content.
• Must have Certified Information Systems Security Professional (CISSP) or equivalent certifications.
• Certified Information Security Manager (CISM) or Certified Information Systems Auditor (CISA) are good to have.

About the Team
Who is Siemens Energy?

At Siemens Energy, we are more than just an energy technology company. With ~100,000 dedicated employees in more than 90 countries, we develop energy systems of the future, ensuring that the growing energy demand of the global community is met reliably and sustainably. The technologies created in our research departments and factories drive the energy transition and provide the base for one sixth of the world's electricity generation.

Our distributed team is committed to making sustainable, reliable, and affordable energy a reality by pushing the boundaries of what is possible. We uphold a 150-year legacy of innovation that encourages our search for people who will support our focus on decarbonization, new technologies, and energy transformation.

Find out how you can make a difference at Siemens Energy: https://www.siemens-energy.com/employeevideo

Our Commitment to Diversity

Lucky for us, we are not all the same. Through diversity, we generate power. We run on inclusion and our combined creative energy is fueled by over 130 nationalities. Siemens Energy celebrates character – no matter what ethnic background, gender, age, religion, identity, or disability. We energize society, all of society, and we do not discriminate based on our differences.

Rewards/Benefits

• Opportunities to work with a global team and lead a variety of innovative projects
• Medical benefits
• Flexible work
• Time off/Paid holidays and parental leave
• Continual learning through the Learn@Siemens-Energy platform

https://jobs.siemens-energy.com/jobs