OT Cybersecurity Lead Consultant Fortinet

Ability to design OT security architectures that prioritize availability, safety, and recoverability over pure prevention

Ability to understand ICS/OT network architectures, regardless of the technology, and perform a detailed technical review.

Deep understanding of the Purdue Reference Model (ISA-95) and how IT/OT and cloud convergence reshape the OT attack surface.

Ability to apply OT specific risk methods (e.g., Bowtie) in a cybersecurity context.

Expertise in Zones and Conduits (IEC62443) design to ensure network segmentation effectively isolates critical assets.

Knowledge of OT specific threat actors and tactics (e.g.: MITRE ATT&CK for ICS).

Understanding OT standards and guidelines, such as IEC62443, ISA-TR-84.00.09 and NIST SP 800-82.

Understanding the relationship between Functional Safety (IEC 61508/61511) and Cybersecurity (IEC 62443).

Knowledge of Industrial Control Systems (ICS) and architecture design (preferably ABB, Allen Bradley (Rockwell Automation), Schneider Electric or Siemens).

Understanding technologies such as NGFW, IDS, IPS, SIEM and others; and how they are deployed in an OT environment to implement a defense-in-dept strategy.

Familiarity with active and passive monitoring tools (e.g.: Nozomi Networks, Dragos, Claroty, Tenable) to collect data from asset-owners OT networks.

Ability to interpret OT specific CVEs and their impact on PLCs, RTUs, HMIs and others.

Ability to perform a site walkdown for physical assessment.

Ability to select and position monitoring and protection technologies appropriately within an OT architecture.

Demonstrate expertise in establishing ICS/OT Cybersecurity Governance Framework such as ability to review existing and design new organizational policies and procedures, RACI and others.

Knowledge of Fortinet products with a NSE4 certification on Secure Networking would be a plus.