Summary
Why WWT?
World Wide Technology (WWT) strives to make a new world happen. WWT's work benefits clients and partners as much as it does its people and community across the globe.
Founded in 1990, WWT brings together strategy, deep technical expertise and world-class partnerships to help public and private sector organizations design, build and scale intelligent AI, digital, cybersecurity, cloud and infrastructure solutions. Through its Advanced Technology Center (ATC)-a collaborative ecosystem featuring state-of-the-art hardware and software-WWT enables clients and partners to conceptualize, test and validate innovative technology and then deploy solutions at scale using its global integration and distributions capabilities.
With more than 14,000 team members and over 60 locations globally, WWT's culture-grounded in core values and leadership philosophies-has been recognized by Fortune® and Great Place to Work for its commitment to innovation, trust and creating a great place to work for all. WWT provides products and services to large enterprise, global service provider and public sector clients in up to 130 countries across six continents. Softchoice, a World Wide Technology company, supports commercial and SMB markets in the U.S. and Canada.
Want to work with highly motivated individuals on high-performance teams? Join WWT today!
What is the Solutions Consulting & Engineering (SC&E) Team and why join?
Solutions Consulting & Engineering is an organization that is Customer Focused and Solutions Led. We deliver end-to-end and emerging solutions to drive customer satisfaction, increase profitability and growth. Our success is enabled by our world-class management consulting, delivery excellence and engineering brilliance. Our goal is to bring together business acumen with full-stack technical know-how to develop innovative solutions for our clients' most complex challenges.
Position Overview
World Wide Technology (WWT) is seeking a Security Consultant to execute the discovery and analysis work at the core of operational technology and industrial control system security engagements across critical infrastructure and manufacturing clients. This is a consulting role: you gather and analyze technical evidence, document the OT environment as operated, and draft the deliverable sections that record current state and inform the client's remediation plan. You are the consultant the client's representatives work with directly, operating under the direction of a Sr. Consultant, Lead Consultant, or Principal Consultant who owns the workstream and the finished deliverable.
OT engagements are governed by constraints that do not apply in enterprise IT. Availability and safety outrank confidentiality, change is bound to management-of-change processes and outage windows, and a meaningful share of the installed base runs unsupported operating systems on equipment that cannot be patched or actively scanned. Engagements follow a consequence-driven, standards-anchored methodology. You support passive discovery and structured site walkdowns, document zones and conduits against the Purdue reference architecture, and assemble the evidence used to assess controls against ISA/IEC 62443, NIST SP 800-82, and the client's regulatory obligations. You are expected to learn the methodology on the engagement and apply it with increasing independence.
This is a full-time position and the entry point into WWT's OT consulting practice, with a defined growth path toward the Sr. Consultant level. Prior client-facing or consulting experience is preferred. Strong networking fundamentals, familiarity with industrial control environments, and demonstrable writing ability are required.
Key Responsibilities
+ Execute assigned discovery and analysis tasks within OT security workstreams, with accountability for accuracy, completeness, and on-time completion.
+ Conduct OT discovery under the direction of the workstream lead, including asset inventory and network baselining, control system architecture documentation, protocol and traffic analysis, remote access path enumeration, patch and lifecycle posture, backup and recovery review, and third-party and vendor access review.
+ Support site walkdowns and structured interviews with client controls, plant IT, operations, maintenance, safety, and vendor personnel. Capture accurate notes, document the environment as operated, and note where drawings and asset records differ from what was observed.
+ Operate safely on client sites : complete required site safety training and work within client PPE, escort, permit, and lockout/tagout requirements without exception.
+ Document current-state zones and conduits against the Purdue Enterprise Reference Architecture and IEC 62443-3-2, including trust boundaries, IDMZ posture, and the cross-level flows that deviate from the model.
+ Collect and analyze technical evidence : firewall and switch configurations, network diagrams, passive monitoring exports, asset visibility exports, remote access logs, and control system architecture documentation.
+ Support control assessment against ISA/IEC 62443, NIST SP 800-82r3, NIST CSF 2.0, and the client's obligations under NERC CIP, TSA Security Directives, AWIA, CISA Cross-Sector Cybersecurity Performance Goals, or sector equivalents, documenting the evidence behind each finding.
+ Support technology assessment by documenting which OT security technology is deployed, how it is configured, and where licensed capability is unused. Provide those findings for the workstream lead's recommendation.
+ Account for AI systems in scope by identifying machine learning and analytics components in the OT environment, including ML-based anomaly detection within monitoring platforms, vendor-hosted predictive maintenance and remote diagnostics, and any pathway by which process data leaves the facility or automated action is returned to it. Document the resulting conduits and trust boundaries.
+ Account for operational and safety constraints by documenting how safety instrumented systems, management-of-change processes, validated environments, and turnaround windows limit remediation options.
+ Draft assigned deliverable sections , including current-state summaries, gap tables, network and zone diagrams, and roadmap inputs, at a quality level requiring editorial review rather than substantive rewriting.
+ Maintain the Document Request List (DRL) : track requested artifacts, follow up with client counterparts, and keep status current for the workstream lead.
+ Support pre-readout preparation : assemble validated findings, check figures and diagrams for accuracy, and incorporate review feedback across iterations.
+ Identify risks and gaps through the project's RAID process and weekly status reporting, documenting blockers, open items, and missing data in advance of schedule impact.
+ Contribute to practice IP : improve wal...