Qualifications
Experience
- 2–5 years of experience in cybersecurity, industrial automation, controls engineering, or enterprise networking, with demonstrated exposure to OT/ICS environments and their security concepts.
- Demonstrated ability to produce clear, well-structured written technical content; a writing sample or portfolio is welcome.
- Working familiarity with industrial control system components and their operating context, including SCADA, DCS, PLCs, RTUs, HMIs, historians, and engineering workstations.
- Working familiarity with OT protocols and their security characteristics, such as Modbus, DNP3, EtherNet/IP and CIP, PROFINET, OPC-UA, or IEC 61850.
- Working familiarity with the Purdue Enterprise Reference Architecture and with segmentation, IDMZ, and unidirectional gateway concepts in OT environments.
- Solid data networking fundamentals: routing and switching, VLANs, ACLs, NAT, firewall rule structure, and north-south versus east-west traffic flows.
- Familiarity with OT asset visibility and passive monitoring platforms, including the safety rationale for passive over active discovery.
- Familiarity with OT standards and regulatory drivers: ISA/IEC 62443, NIST SP 800-82r3, NIST CSF 2.0, and one or more of NERC CIP, TSA Security Directives, or AWIA.
- Demonstrated ability to work with large technical data sets: spreadsheet analysis, configuration parsing, traffic and log review, and network diagramming.
- Preferred: direct experience in an operating industrial environment (controls engineering, plant IT, maintenance, or operations); exposure to OT incident response or tabletop exercises; prior consulting, VAR, or systems-integrator experience.
- Certifications desired: Security+, Network+, GICSP, or ISA/IEC 62443 Cybersecurity Fundamentals Specialist.
Specialized Knowledge, Skills & Abilities
Working knowledge in at least two of the following areas:
- Operational Technologies and Environments (ICS, SCADA, DCS, BAS, IIoT, IoMT)
- Industrial Network Architecture and Segmentation (Purdue model, IDMZ, zones and conduits)
- OT Asset Visibility, Monitoring, and Detection
- Risk Management and Assessments
- Policy, Governance, and Compliance (ISA/IEC 62443, NERC CIP, TSA, NIST)
- Secure Remote Access and Third-Party/Vendor Access Governance
- Network and Systems Security
- Identity and Access Management
Professional Attributes
- Professional writing is required: demonstrable ability to produce technical content at a quality level requiring editorial review rather than substantive rewriting.
- Able to manage concurrent tasks and shifting priorities, with guidance on sequencing and trade-offs.
- Able to communicate clearly with controls engineers, plant operators, and technical SMEs, and to adapt language for project sponsors and working-group leadership.
- Collaborative, dependable, and responsive; willing to raise clarifying questions promptly rather than proceeding on assumption.
- Self-directed within defined tasks, with strong problem-solving instincts and intellectual curiosity about evolving technology.
- Willing and able to travel to client facilities on an occasional basis, and to work within plant safety, PPE, escort, and permit requirements.
Professional Behaviors
Beyond technical delivery, this role is expected to demonstrate the following in front of clients and within the WWT team:
- Safety first: treat client site safety rules as non-negotiable, and never allow a security objective to override an operational or safety constraint.
- Ownership and accountability: take responsibility for the accuracy of every artifact you produce, and follow through on commitments without being chased.
- Credibility: come prepared, develop a thorough working knowledge of the environment being documented, and establish yourself as a reliable source of technical detail for client staff.
- Clear communication: report status, blockers, and data gaps promptly and plainly, in advance of any schedule impact.
- Integrity: report what the evidence shows, including when it contradicts the client’s documentation or the team’s working assumption.
Want to learn more about Consulting & Security Services? Check us out on our platform:
https://www.wwt.com/consulting-services
https://www.wwt.com/category/security-transformation
Certain states and localities require employers to post a reasonable estimate of salary range. A reasonable estimate of the current base pay range for this position is $82,800 to $103,500 annually. Actual salary will be based on a variety of factors, including shift, location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base pay.
The well-being of WWT employees is essential. When it comes to our benefits package, WWT has one of the best. We offer the following benefits to all full-time employees:
- Health and Wellbeing: Health (Medical & Prescription), Dental, and Vision Care, Onsite Health Centers (MO & IL), Employee Assistance Program, Wellness program
- Financial Benefits: Competitive Pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Flexible Spending Accounts, Tuition Reimbursement
- Paid Time Off: PTO & Holidays, Parental Leave, Medical Leave, Military Leave, Bereavement, Day of Caring
- Additional Perks: Family Planning Benefits, Nursing Mothers Benefits, Voluntary Legal, Voluntary Supplemental Accident/Illness/Hospital, Voluntary ID Theft, Pet Insurance, Employee Discount Program
Note: This is not an all-encompassing list and should not be used as a complete description of the plan’s benefits. For more information, see our US benefits website at wwt.com/us-benefits.
We strive to create an environment where all employees are empowered to succeed based on their skills, performance, and dedication. Our goal is to cultivate a culture of belonging that encourages innovation, collaboration, and respect for all team members, ensuring that WWT remains a great place to work for all!
If you require accessibility accommodation(s) or adjustment during any stage of the hiring process, please let your WWT Recruiter know. The recruiter will work with you to understand your needs and help ensure an accessible experience throughout the interview process.
World Wide Technology is an Equal Opportunity Employer.
If you have any questions or concerns about this posting, please email taposting@wwt.com.
Why WWT?
World Wide Technology (WWT) strives to make a new world happen. WWT's work benefits clients and partners as much as it does its people and community across the globe.
Founded in 1990, WWT brings together strategy, deep technical expertise and world-class partnerships to help public and private sector organizations design, build and scale intelligent AI, digital, cybersecurity, cloud and infrastructure solutions. Through its Advanced Technology Center (ATC) - a collaborative ecosystem featuring state-of-the-art hardware and software - WWT enables clients and partners to conceptualize, test and validate innovative technology and then deploy solutions at scale using its global integration and distributions capabilities.
With more than 14,000 team members and over 60 locations globally, WWT's culture - grounded in core values and leadership philosophies - has been recognized by Fortune® and Great Place to Work for its commitment to innovation, trust and creating a great place to work for all. WWT provides products and services to large enterprise, global service provider and public sector clients in up to 130 countries across six continents. Softchoice, a World Wide Technology company, supports commercial and SMB markets in the U.S. and Canada.
Want to work with highly motivated individuals on high-performance teams? Join WWT today!
What is the Solutions Consulting & Engineering (SC&E) Team and why join?
Solutions Consulting & Engineering is an organization that is Customer Focused and Solutions Led. We deliver end-to-end and emerging solutions to drive customer satisfaction, increase profitability and growth. Our success is enabled by our world-class management consulting, delivery excellence and engineering brilliance. Our goal is to bring together business acumen with full-stack technical know-how to develop innovative solutions for our clients' most complex challenges.
Position Overview
World Wide Technology (WWT) is seeking a Security Consultant to execute the discovery and analysis work at the core of operational technology and industrial control system security engagements across critical infrastructure and manufacturing clients. This is a consulting role: you gather and analyze technical evidence, document the OT environment as operated, and draft the deliverable sections that record current state and inform the client’s remediation plan. You are the consultant the client’s representatives work with directly, operating under the direction of a Sr. Consultant, Lead Consultant, or Principal Consultant who owns the workstream and the finished deliverable.
OT engagements are governed by constraints that do not apply in enterprise IT. Availability and safety outrank confidentiality, change is bound to management-of-change processes and outage windows, and a meaningful share of the installed base runs unsupported operating systems on equipment that cannot be patched or actively scanned. Engagements follow a consequence-driven, standards-anchored methodology. You support passive discovery and structured site walkdowns, document zones and conduits against the Purdue reference architecture, and assemble the evidence used to assess controls against ISA/IEC 62443, NIST SP 800-82, and the client’s regulatory obligations. You are expected to learn the methodology on the engagement and apply it with increasing independence.
This is a full-time position and the entry point into WWT’s OT consulting practice, with a defined growth path toward the Sr. Consultant level. Prior client-facing or consulting experience is preferred. Strong networking fundamentals, familiarity with industrial control environments, and demonstrable writing ability are required.
Key Responsibilities
- Execute assigned discovery and analysis tasks within OT security workstreams, with accountability for accuracy, completeness, and on-time completion.
- Conduct OT discovery under the direction of the workstream lead, including asset inventory and network baselining, control system architecture documentation, protocol and traffic analysis, remote access path enumeration, patch and lifecycle posture, backup and recovery review, and third-party and vendor access review.
- Support site walkdowns and structured interviews with client controls, plant IT, operations, maintenance, safety, and vendor personnel. Capture accurate notes, document the environment as operated, and note where drawings and asset records differ from what was observed.
- Operate safely on client sites: complete required site safety training and work within client PPE, escort, permit, and lockout/tagout requirements without exception.
- Document current-state zones and conduits against the Purdue Enterprise Reference Architecture and IEC 62443-3-2, including trust boundaries, IDMZ posture, and the cross-level flows that deviate from the model.
- Collect and analyze technical evidence: firewall and switch configurations, network diagrams, passive monitoring exports, asset visibility exports, remote access logs, and control system architecture documentation.
- Support control assessment against ISA/IEC 62443, NIST SP 800-82r3, NIST CSF 2.0, and the client’s obligations under NERC CIP, TSA Security Directives, AWIA, CISA Cross-Sector Cybersecurity Performance Goals, or sector equivalents, documenting the evidence behind each finding.
- Support technology assessment by documenting which OT security technology is deployed, how it is configured, and where licensed capability is unused. Provide those findings for the workstream lead’s recommendation.
- Account for AI systems in scope by identifying machine learning and analytics components in the OT environment, including ML-based anomaly detection within monitoring platforms, vendor-hosted predictive maintenance and remote diagnostics, and any pathway by which process data leaves the facility or automated action is returned to it. Document the resulting conduits and trust boundaries.
- Account for operational and safety constraints by documenting how safety instrumented systems, management-of-change processes, validated environments, and turnaround windows limit remediation options.
- Draft assigned deliverable sections, including current-state summaries, gap tables, network and zone diagrams, and roadmap inputs, at a quality level requiring editorial review rather than substantive rewriting.
- Maintain the Document Request List (DRL): track requested artifacts, follow up with client counterparts, and keep status current for the workstream lead.
- Support pre-readout preparation: assemble validated findings, check figures and diagrams for accuracy, and incorporate review feedback across iterations.
- Identify risks and gaps through the project’s RAID process and weekly status reporting, documenting blockers, open items, and missing data in advance of schedule impact.
- Contribute to practice IP: improve walkdown and discovery templates, data-collection tooling, diagram libraries, and other reusable artifacts that improve delivery efficiency on subsequent engagements.
Typical Deliverables
The engagement’s defining output is a client-ready set of OT security deliverables. Your contribution is the current-state foundation of that set: the evidence, the analysis, and the drafted sections that a Sr. or Lead Consultant develops into architecture and roadmap. Accuracy is a primary performance criterion for this role, because a plan based on an inaccurate asset inventory or a misread network diagram will fail during implementation, frequently well after the deliverable has been accepted.
You contribute to the following deliverable set, typically as a drafting author on the current-state and analysis sections:
- Current-State OT Discovery & Asset Baseline: primary drafting contributor for the asset inventory, network architecture and dataflow documentation, protocol and communication baseline, remote access path inventory, and lifecycle and patch posture across in-scope sites.
- OT Cybersecurity Gap & Risk Assessment: contributor for gap tables, control mapping, and the supporting evidence behind each finding.
- Zone & Conduit Architecture and Segmentation Design: supporting contributor for current-state zone and conduit diagrams and validation of the assumptions the target-state design rests on.
- OT Secure Remote Access & Monitoring Design: supporting contributor for remote access inventories and monitoring coverage data.
- Executive Findings & Recommendations: supporting contributor for figures, diagrams, and fact-checking of every finding presented to client leadership.
Growth & Development
- Build depth across the major control system platform families, industrial protocols, and networking fundamentals through project work, certifications, partner training, and lab work.
- Seek and apply feedback from Sr. and Lead Consultants. Demonstrate consistent growth in delivery independence, written quality, and technical breadth.
- Maintain working currency in AI security as the field develops, including the evolution of AI risk frameworks, the security implications of agentic and tool-calling systems, and the controls available to govern them; AI competence is expected of every consultant in the practice, independent of specialization.
- Grow toward independently owning a defined workstream, which is the threshold for the Sr. Consultant level.