Aws security architect

Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable , more inclusive world.

Are you passionate about industrial cybersecurity and ready to design secure architectures for OT/ICS environments? At Capgemini, we’re looking for an experienced OT Security Architect to join our cybersecurity team and help protect critical infrastructure for top‑tier clients.


⚙️ Design secure architectures for ICS/SCADA, DCS, PLCs, RTUs, IIoT and industrial edge devices.
Define OT cybersecurity reference architectures aligned with:
Develop architectural patterns covering asset protection, segmentation, secure remote access, monitoring, and threat containment .

Network & Segmentation Architecture
Architect multilayered IT/OT segmentation using:
Industrial DMZ , Jump Servers, Secure Remote Access
Design security for complex converged networks involving Ethernet/IP, PROFINET, Modbus/TCP, OPC UA, BACnet, DNP3.

Security Monitoring & Tooling Integration
Nozomi Networks, Claroty xDome/CTD, Armis, Dragos, TenableOT .
Threat Modeling & Risk Analysis
Define compensating controls for legacy OT systems with limited security capability.

Lifecycle Security & Governance
Develop OT cybersecurity roadmaps , maturity models, and capability blueprints.
Lead architectural reviews, compliance assessments, and security design approvals.
Support incident response with architecture-level analysis and containment strategies.

Secure remote access & identity for OT (jump servers, MFA, PAM for OT).
Cloud‑connected industrial architectures and IIoT gateways.
Security automation for OT/ICS environments (Ansible, Terraform for infra automation).


5+ years of experience in OT cybersecurity, ideally in a design or architecture role.
~ Strong understanding of industrial protocols (Modbus, DNP3, OPC UA, Profinet, BACnet…).
~ Expertise in OT network architecture, segmentation, and industrial firewalls.
~ Experience with ICS security platforms (Nozomi, Claroty, Armis…).
~ VLANs, L3 segmentation, OT firewalls (Fortinet, Palo Alto, Cisco, Tofino, Hirschmann), high-availability network design.
~ Experience integrating OT security tools with SIEM/SOC systems.
~ English B2+ level.


CISSP, CISM, Security+, GIAC (GRID, GICSP, GCIP), or ISA/IEC 62443 certifications.

Flexible Compensation Plan – Choose benefits that best fit your needs: medical insurance, transportation, training, meal card or meal allowance, childcare vouchers, and more.
Continuous Learning – Access to Mylearning , Capgemini University , Digital Campuses, and our Professional Communities. You’ll also have learning platforms like Coursera, Udemy, Pluralsight, Harvard Manager Mentor , and Education First for language training (English, French, German…), among others!
Volunteer & Social Impact Programs – Get involved through our Sustainability, Inclusion, and Equality Groups.
Remote work available


Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. It is a responsible and diverse organization of over 360,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fuelled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2022 global revenues of €22 billion.