Network Security Architect

Location: Tel Aviv (Hybrid)

A snapshot of your day

Your day begins by actively participating in security design and implementation projects (e.g. network segmentation, zero trust, vulnerability management, endpoint protection, remote access, IAM, IDS) for internal and external clients. You will be conducting tasks such as developing cybersecurity concepts, reference architectures, solutions and methods required to fulfil projects objectives and support their implementation, reviewing the integrity of OT networks, which may involve analyzing traffic from SCADA systems, PLCs, and other industrial devices for any anomalies or potential threats. You'll collaborate with both IT and OT teams, translating business objectives from operational managers into secure, functional network architectures. A key task is overseeing the implementation of network segmentation, the crucial separation of IT and OT networks -across our robust product portfolio.

You will engage with vendors, evaluating new security technologies like intrusion detection systems specifically designed for OT environments. Throughout the day, you will be creating and updating architectural documentation, ensuring our network blueprints are accurate and align with stringent industry standards, such as IEC 62443 and NIS2.

Your key responsibilities will include:

• Architect OT Networks: Design, develop, and implement secure and reliable network architectures for Operational Technology (OT) and Industrial Control Systems (ICS) environments, including SCADA, DCS, and PLCs.
• Enforce Network Segmentation: Lead and execute strategies for robust IT/OT network segmentation and access control mechanisms, including DMZs and firewalls.
• Develop Security Strategies: Define and govern OT security architecture, standards, and policies to protect critical assets from cyber threats.
• Conduct Assessments: Perform risk assessments, vulnerability analyses, and gap analyses of existing OT systems to identify and mitigate risks.
• Ensure Compliance: Guarantee network designs and implementations adhere to regulatory requirements and industry best practices, such as IEC 62443 and NIS2.
• Provide Technical Leadership: Act as a subject matter expert on OT network and cybersecurity technologies, providing guidance and mentorship to engineering and operations teams.
• Support Incident Response: Collaborate with incident response teams to develop and test plans for OT systems, assisting with remediation efforts when needed.
• Create Documentation: Develop and maintain detailed architectural documentation, including high-level and low-level designs and network topology maps.
  
  

How you'll make an impact

Your role is critical to protecting the operational heart of our business. The secure and efficient performance of our industrial networks directly impacts on our production, safety, and reliability. By safeguarding our OT systems, you will prevent operational disruptions, protect our intellectual property, and ensure the safety of our employees and the public. You will be instrumental in translating complex, real-world operational needs into resilient and scalable network designs, balancing the unique constraints of the industrial environment with modern cybersecurity demands.

What you bring

• Education:
• A Bachelor's or Master's degree in a relevant field, such as Electrical Engineering, Cybersecurity, or Computer Science.
• Technical Requirements:
• 5+ years of experience in network security architecture, with significant time spent focused on OT/ICS environments.
• OT Expertise: A deep understanding of industrial control systems (ICS), including SCADA, DCS, and PLCs, as well as industrial protocols.
• Network Security: Extensive knowledge of network security principles, including firewalls, intrusion detection systems (IDS/IPS), network segmentation, and zero-trust concepts.
• Industry Standards: Practical experience with OT security standards and frameworks, such as IEC 62443, NIS2, and MITRE ATT&CK for ICS.
• Proven capability to develop professional documents in the form reports, analysis, network diagrams, methodologies in the English language
• General requirements
• Strategic Thinking: The ability to develop multi-year security roadmaps based on risk assessments and business objectives.
• Cross-Functional Leadership: Excellent communication skills to effectively bridge the gap between IT, engineering, operations, and leadership.
• Analytical Skills: Strong problem-solving abilities to address the unique and complex challenges of securing industrial environments.
• Full professional proficiency in English
• Certifications:
• Professional certifications like GIAC Global Industrial Cyber Security Professional (GICSP), CISSP, or Cisco CCNP are highly desirable.
  
  

About The Team

The Digital Products & Solutions organization is responsible for developing software solutions for both internal and external customers. These solutions include Edge Computing and applications, On-site sensor technology integration, Cloud-based platforms and cloud-based software solutions and applications.

The solutions, applications, and platforms we provide allow data acquired to be used to improve the operation and maintenance of power plants and industrial facilities of all sizes this includes the development of digital twins, analytics platforms and agents, artificial intelligent and machine learning applications and algorithms.

Who is Siemens Energy?

At Siemens Energy, we are more than just an energy technology company. We meet the growing energy demand across 90+ countries while ensuring our climate is protected. With more than 92,000 dedicated employees, we not only generate electricity for over 16% of the global community, but we’re also using our technology to help protect people and the environment.

Our global team is committed to making sustainable, reliable, and affordable energy a reality by pushing the boundaries of what is possible. We uphold a 150-year legacy of innovation that encourages our search for people who will support our focus on decarbonization, new technologies, and energy transformation.

Our Commitment to Diversity

Lucky for us, we are not all the same. Through diversity we generate power. We run on inclusion and our combined creative energy is fueled by over 130 nationalities. Siemens Energy celebrates character - no matter what ethnic background, gender, age, religion, identity, or disability. We energize society, all of society, and we do not discriminate based on our differences.

Rewards/Benefits

• Working with a global team
• Opportunities to work on and lead a variety of innovative projects
• Supportive work culture
• Remote/Flexible work
• Continual learning through the Learn@Siemens-Energy platform
  
  

We value equal opportunities and welcome applications from people with disabilities