Product Security Architect- Operational Technology (OT)

Overview

Serve as the Product Security Architect for Operational Technology within Battery Energy Storage Systems (BESS), integrating security into OT components and improving security architectures and standards. Act as a senior subject matter expert and primary consultant on complex OT security matters affecting products, projects, and customer deployments.

What you'll do

• Execute and influence OT security architecture strategy within established Product Security and BESS technology direction.
• Lead complex OT-specific threat modeling, design reviews, and security architecture assessments for products, projects, and customer deployments.
• Apply and improve security-by-design practices throughout the product lifecycle.
• Develop, apply, and improve security reference architectures and standards for OT, ICS, SCADA, Energy Management Systems (EMS), cloud-connected systems, and remote access platforms.
• Collaborate with cross-functional teams to define and implement security architecture requirements for BESS OT systems.
• Serve as a senior subject matter expert and primary security consultant for complex critical infrastructure and utility deployment matters.
• Mentor engineers and security practitioners and contribute reusable architecture guidance, patterns, and lessons learned.
• Guide the implementation of secure remote access, Zero Trust, identity architecture, PAM, SBOM, vulnerability disclosure, and resilience capabilities for BESS solutions.
• Provide expert technical support to customers, auditors, and regulators on BESS cybersecurity architecture, controls, and assurance activities.
• Make security architecture decisions and recommendations that materially affect assigned products, projects, and customer deployments.

What you'll need

• Bachelor's degree in Computer Science, or equivalent practical experience.
• Minimum 8+ years of cybersecurity, security architecture, or critical infrastructure security experience.
• Minimum 5+ years of experience supporting utility-scale energy systems, industrial environments, or comparable critical infrastructure.
• Experience applying IEC 62443 secure-by-design principles to product or solution architectures.
• Experience supporting compliance and assurance activities involving NERC CIP, NIS2, EU CRA, SOCI/CIRMP, or similar frameworks.
• Experience applying Zero Trust principles across converged IT/OT environments.
• Threat Modeling (STRIDE/DREAD) and Security Architecture Reviews (OWASP based).
• Consequence Planning for cyber safety in OT environments.
• Working knowledge of Software Assurance Maturity Models.
• Technical knowledge on OT environments (SCADA / Edge Devices).
• Ability to prioritize security features into upcoming product releases for hardware and software (support patent development).

Nice to have

• Preferred certifications include ISA/IEC 62443, GIAC GRID, GIAC GICSP, CISSP, or a recognized security architecture certification.
• Master's degree in Computer Science.
• Experience assessing cyber-physical, supply chain, and advanced threat risks and translating them into practical architecture requirements.
• Advanced capabilities in power systems, SCADA security, industrial networking, and grid modernization.

Details

• Location: Fluence GIC - Bangalore, India.
• Reporting to: Director, Product Security.