OT Security Architect/Engineer

About the job

At OxyChem, our chemistry makes modern life possible, and it is our people who make the difference. We are a safety-first, purpose-driven team committed to innovation, environmental responsibility, and doing things the right way. If you are ready to contribute, elevate your skills, and take ownership of your career, Oxychem offers the opportunity to make a difference every day.

OxyChem, a Berkshire Hathaway company, is a leading producer of essential chemistry with operations in the U.S., Canada and Latin America. OxyChem’s products play an essential role in everyday life, supporting critical applications in water treatment, pharmaceuticals, healthcare, manufacturing, automotive, personal hygiene, and residential and commercial construction. OxyChem actively participates in the Occupational Safety and Health Administration Voluntary Protection Program, underscoring our commitment to safety. Headquartered in Dallas, Texas, OxyChem is a top three U.S. manufacturer of polyvinyl chloride, chlor-alkali and chlorinated organic chemicals, and calcium chloride. Visit oxychem.com for more information.

In a fast-paced industry that demands precision, we create a supportive workplace where the safety and well-being of our employees are paramount. We are committed to rewarding top performers, offering very competitive pay and benefits, and providing tremendous career development opportunities.

OxyChem is seeking an OT Security Architect/Engineer to help secure and support industrial control systems, manufacturing networks, and critical operational technologies. This role partners with plant operations, engineering, infrastructure, and enterprise cybersecurity teams to assess risk, implement security controls, respond to incidents, and support compliance with industry standards and internal requirements.

• Key Responsibilities:
• Monitor, triage, and respond to cybersecurity events affecting OT, ICS, and manufacturing environments.
• Conduct OT Security risk assessments, vulnerability reviews, and security audits in partnership with operations, engineering, infrastructure, and enterprise cybersecurity teams.
• Support secure design and implementations of industrial networks, firewalls, remote access, asset discovery, monitoring, and related OT security technologies.
• Evaluate cybersecurity impacts of system, network, application, and process change before implementation, including changes reviewed through formal Management of Change (MOC) or change management processes.
• Develop, review, and maintain secure OT, reference architectures, design patterns, and control requirements aligned with security strategy.
• Partner with engineering and operations teams to develop and maintain secure OT architectures and control requirement for plant and process-control environments.
• Partner with Enterprise security teams to align OT controls architectures, assessments, audit activities and incident response processes with broader cybersecurity strategy.
• Support OT security initiatives from requirements and design through implement, validation, and operational handoff.
• Support disaster recovery exercises, incident response activities and cybersecurity tabletop drills involving OT and manufacturing environments.
• Develop and maintain OT security standards, procedures, documentation, and control evidence to support compliance and operational readiness.
• Monitor emerging OT threats, vulnerabilities, technology trends and industry practices to help improve the security posture of manufacturing environments.
• Provide cybersecurity guidance for projects, site migrations, technology deployments, and operational initiatives affecting OT environments.

• Required Qualifications:
• Bachelor's degree in cybersecurity, information systems, computer science, engineering, or a related field.
• 5+ years of experience in Cybersecurity OT/ICS security, industrial automation, infrastructure security or related disciplines.
• Experience securing or supporting PLC, DCS, SCADA, Safety Instrumented Systems (SIS), laboratory systems, and process-controls environments.
• Experience applying system, network, and application security princples to industrial and manufacuring environments.
• Experience working within formal Management of Change (MOC) or change management processes and evaluating cybersecruity impacts before implementation.
• Experience supporting OT security initiatives from requirements and design through implementation, validation, and operational handoff.
• Knowledge of IEC 62443, NIST CSF, NIST 800-53, NIST 800-171, or similar cybersecurity control frameworks.
• Experience conducting cybersecurity risk assessments and supporting security audits or compliance reviews.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to communicate technical risks, control requirements, and recommendations to technical, operational, and business stakeholders.
• Ability to travel up to 20%

• Preferred Certifications:
• CISSP, GICSP, CASP+, Security+, ISA/IEC 62443 Cybersecurity Certifications, or similar security certifications.

• Preferred Technical Experience:
• Industrial firewalls and network segmentation.
• Intrusion Detection and Prevention Systems (IDS/IPS)
• Security Information and Event Management (SIEM)
• Endpoint detection, response, and monitoring
• OT asset discovery and monitoring platforms
• Vulnerability managemetn and remediation coordination
• Secure remote access solutions
• Cloud security controls and architectures
• Threat intelligence and threat hunting
• Security policies, standards, procedures, and control documentation

Fraud Statement:

• It has come to our attention that various individuals and/or organizations are contacting people falsely pretending to recruit on behalf of OxyChem. Please be aware that these recruiting scams and communications do not originate, nor are they associated with our recruitment process. All OxyChem job postings and offers will require a completed application through our company website.
• OxyChem does not charge a fee at any stage of the recruiting process. We will never:
• Ask you to pay for applications, interviews, meetings, processing, training or for any other fees
• Use recruiting or placement agencies that charge candidates an advance fee of any kind or
• Request personal information such as passport and bank account details at an early stage of our recruitment process.

We recommend against responding to unsolicited business propositions or offers from people you don't know. Do not disclose your personal or financial details. If you believe you have been the victim of a recruiting scam, please contact your local police department.