Product Security Architect- Operational Technology (OT)

The Product Security Architect - Operational Technology (Battery Energy Storage Systems) is responsible for integrating security into operational technology components within BESS infrastructure. The role develops, applies, and improves security architectures and standards for BESS OT systems within Fluence's established product security and technology direction. It serves as a senior subject matter expert and primary consultant on complex OT security matters affecting significant products, projects, and customer deployments.

Responsibilities

Execute and influence OT security architecture strategy within established Product Security and BESS technology direction; Lead complex OT-specific threat modeling, design reviews, and security architecture assessments for products, projects, and customer deployments; Apply and improve security-by-design practices throughout the product lifecycle; Develop, apply, and improve security reference architectures and standards for OT, ICS, SCADA, Energy Management Systems (EMS), cloud-connected systems, and remote access platforms; Collaborate with cross-functional teams to define and implement security architecture requirements for BESS OT systems; Serve as a senior subject matter expert and primary security consultant for complex critical infrastructure and utility deployment matters; Mentor engineers and security practitioners and contribute reusable architecture guidance, patterns, and lessons learned; Guide the implementation of secure remote access, Zero Trust, identity architecture, PAM, SBOM, vulnerability disclosure, and resilience capabilities for BESS solutions; Provide expert technical support to customers, auditors, and regulators on BESS cybersecurity architecture, controls, and assurance activities; Make security architecture decisions and recommendations that materially affect assigned products, projects, and customer deployments

Requirements

Bachelor's degree in Computer Science, or equivalent practical experience; Minimum 8+ years of cybersecurity, security architecture, or critical infrastructure security experience; Minimum 5+ years of experience supporting utility-scale energy systems, industrial environments, or comparable critical infrastructure; Experience applying IEC 62443 secure-by-design principles to product or solution architectures; Experience supporting compliance and assurance activities involving NERC CIP, NIS2, EU CRA, SOCI/CIRMP, or similar frameworks; Experience applying Zero Trust principles across converged IT/OT environments

Nice to have

Master's degree in Computer Science; Experience assessing cyber-physical, supply chain, and advanced threat risks and translating them into practical architecture requirements; Advanced capabilities in power systems, SCADA security, industrial networking, and grid modernization; Preferred certifications include ISA/IEC 62443, GIAC GRID, GIAC GICSP, CISSP, or a recognized security architecture certification