Security Architect - IT/OT Modernization

Security Architect – IT/OT Modernization  

Cybersecurity & Enterprise Technology | Energy & Utilities Focus 

Are you ready to help secure and modernize the infrastructure that powers critical industries? 

West Monroe is seeking a Security Architect to join our Cybersecurity & Enterprise Technology practice, with a primary focus on Energy & Utilities. This role sits at the intersection of cybersecurity, IT/OT integration, enterprise modernization, and emerging AI-enabled security capabilities. 

You will serve as a trusted advisor to utility clients, leading the design and transformation of secure architectures across operational technology (OT), enterprise IT, and evolving AI-enabled environments. While Energy & Utilities will be your primary focus, you will also have opportunities to support clients across other highly regulated industries, including Financial Services and Healthcare. 

What You’ll Do 

• Architect Secure IT/OT & Enterprise Environments 

• • Design secure, scalable architectures across converged IT and OT environments 

• • Secure integration of operational systems such as SCADA, EMS, ADMS, DERMS, and other industrial platforms with enterprise IT systems (ERP, CRM, analytics, cloud platforms) 

• • Develop security reference architectures supporting IT/OT convergence and infrastructure modernization 

• • Embed Zero Trust principles, segmentation, identity controls, and monitoring into modernized environments 

• Lead Enterprise Cybersecurity Tooling Strategy 

• • Evaluate, select, design, and implement enterprise cybersecurity solutions across: 

• • Identity & Access Management (IAM) and privileged access 

• • Network security and micro-segmentation 

• • Endpoint detection & response (EDR/XDR) 

• • SIEM and SOAR platforms 

• • OT monitoring platforms (e.g., Dragos and other ICS security solutions) 

• • Data protection, DLP, and cloud security services 

• • Develop integrated tooling roadmaps aligned to business risk, regulatory requirements, and operational resilience 

• • Integrate OT and enterprise telemetry into unified SOC and monitoring environments 

• Transform Cybersecurity Operations 

• • Assess and modernize IT and OT security operations capabilities 

• • Architect and implement SIEM, SOAR, and next-generation detection & response solutions 

• • Design SOC operating models that support hybrid IT/OT ecosystems 

• • Leverage automation, orchestration, and advanced analytics to enhance detection and response outcomes 

• Design & Secure AI-Enabled Environments 

• • Evaluate and design AI-enabled solutions that enhance cybersecurity operations, including: 

• • AI-assisted threat detection and anomaly analysis 

• • Automated investigation and response workflows 

• • Predictive risk modeling and analytics 

• • Architect secure AI infrastructure that supports lines of business, ensuring: 

• • Secure model deployment environments 

• • Data protection and access controls for training and inference pipelines 

• • Monitoring and logging for AI systems 

• • Alignment to responsible AI and regulatory considerations 

• • Advise clients on risk management strategies for AI systems, including model integrity, data security, and operational resilience 

• Strengthen Governance, Risk & Compliance 

• • Lead security posture and maturity assessments 

• • Design and implement programs aligned to frameworks such as: 

• • NERC CIP 

• • IEC 62443 

• • NIST CSF / 800-53 

• • ISO 27001 

• • Align AI, IT, and OT security controls with regulatory and compliance requirements 

• • Support audit readiness and control validation initiatives 

• Drive Client & Practice Impact 

• • Facilitate architecture workshops, security assessments, and executive strategy discussions 

• • Act as a trusted advisor to CIOs, CISOs, and operational leadership 

• • Support proposal development, solution design, and client presentations 

• • Contribute to development of IT/OT and AI security reference architectures and thought leadership 

What You Bring 

• 7–10+ years of experience in security architecture, enterprise cybersecurity engineering, or IT/OT architecture 

• Experience working within or consulting to Energy & Utilities (electric, gas, or water) or other highly regulated industries 

• Strong understanding of IT/OT convergence and industrial control systems (ICS) security 

• Demonstrated experience designing, implementing, and evaluating enterprise cybersecurity tooling, including: 

• IAM and identity governance 

• Network security architecture and segmentation 

• Endpoint detection technologies 

• SIEM/SOAR and SOC tooling 

• OT monitoring platforms (e.g., Dragos or similar) 

• Cloud-native security solutions 

• Experience modernizing and integrating security operations across hybrid environments 

• Familiarity with AI-enabled security technologies and securing AI/ML infrastructure 

• Experience with governance, risk, and compliance frameworks such as NERC CIP, IEC 62443, NIST, or ISO standards 

• Strong executive communication and stakeholder engagement skills 

• Ability to translate business and operational objectives into secure, scalable architectural solutions 

• Willingness to travel for client engagements 

Preferred / Plus Qualifications 

• Prior consulting experience in a client-facing advisory role 

• Experience leading IT/OT transformation programs 

• Familiarity with emerging AI governance and model risk management frameworks