Verified Job
Engineering - Architecture
GDS Cyber - CAOE - Staff - AI IT OT Network and Infrastructure Security
Engineering - Architecture
#824515
Remote / WFH
EY
Job Description
At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.
AI - IT/OT Network & Infrastructure Security – Staff
Role Summary
We are looking for an AI - IT/OT Network & Infrastructure Security Staff professional with solution mindset, who understands & possess knowledge in network security / Infrastructure security concepts, risk and controls concepts, architecture design, transformations that sit at the intersection of enterprise platforms, cybersecurity controls, and AI tools. This role is for a staff professional who should have practical experience in network security engineering, detection engineering, and OT cyber risk reduction, with growing exposure to AI-assisted security operations, prompt engineering, AI-driven anomaly detection, and device behavior analytics.
This role is part of the Cyber Frontier & AI capability focused on enabling scalable, AI-first cyber defense across enterprise and industrial environments.
Key Responsibilities
• Understands design and implementation of network and infrastructure security strategies across enterprise, cloud, and OT environments.
• Drive adoption of Zero Trust, IEC 62443-aligned OT security controls, and advanced segmentation architectures.
• Possess knowledge about deployment and governance of NGFW, NAC, VPN, ZTNA, SASE, DNS security, CASB, and CSPM solutions.
• Incident response and security improvement initiatives to enhance cyber resilience across hybrid infrastructure.
Possess knowledge & experience on secure remote access, DMZ architecture, PLC security, and cloud network protection.
• Good understanding on AI-assisted IT/OT security architecture and operations, enabling predictive threat monitoring and automated response within industrial environments.
• Understands AI-driven anomaly detection models to identify deviations in OT network traffic, process behaviors, and industrial protocols (e.g., Modbus, DNP3, OPC).
• Build AI-based rule optimization frameworks for IT/OT security controls, improving traffic filtering, segmentation policies, and alert accuracy.
• Leverage AI for OT network traffic optimization, enabling intelligent routing, congestion minimization, and adaptive policy enforcement.
• Implement AI-powered device behavior profiling, establishing baselines for PLCs, HMIs, and IoT/IIoT assets to detect unauthorized or abnormal activities.
• Apply AI in PLC code analysis and review, identifying logic anomalies, misconfigurations, and potential security vulnerabilities in industrial control systems.
• Utilize AI/ML for network threat detection, including intrusion detection, lateral movement analysis, and zero-day attack identification in IT/OT environments.
• Design and optimize prompt engineering strategies to effectively leverage GenAI tools for IT/OT security use cases such as incident investigation, log analysis, and threat intelligence enrichment.
• Enable AI-driven continuous monitoring and predictive risk analytics to enhance IT/OT resilience and reduce operational downtime.
• Build reusable methods, accelerators, reference architectures, and runbooks that strengthen the firm’s AI Network & Infrastructure Security offerings and improve repeatability across sectors and accounts.
• Manage client expectations, delivery scope, solution quality, risks, and technical escalations while coaching teams and enabling long-term client capability through documentation and knowledge transfer.
Required Qualifications
• 1–3 years of experience across AI driven Network & Infrastructure security domain, Security architecture, OT security, Zero Trust Security, or related fields.
Professional understanding & knowledge of-
• OT security tools (Nozomi, Claroty, Armis, Dragos, Cisco Cyber Vision) and OT vulnerability management.
• XDR, Zero Trust, and regulatory frameworks (IEC 62443, CIS). Hands-on with NGFWs (Palo Alto, Cisco, Fortinet, Azure Firewall) and VMware virtualization security.
• SSE/SASE platforms (Netskope, Zscaler, Akamai) and secure access technologies (VPN, ZTNA, DNS security).
• Multi-vendor security integration across IT, OT, and cloud environments.
Ideally, you’ll also have
• Good soft skills i.e. verbal & written communication, technical document writing etc
• Strong interpersonal and customer orientation skills
• Prior experience working in Advisory or Technology Consulting industry
• Knowledge of Information security standards and compliances (ISO 27001, ISO 27017, NIST 800 53, NIST 800-207, CISA, CIS benchmark etc)
• Vendor related certifications (e.g. Zscaler, Nozomi, Netskope, Palo Alto Networks, Cisco & others)
Why join us
Join a globally connected cybersecurity practice helping clients protect their network & infra structure security portfolio in an AI-driven world. You will work at the intersection of IT/OT Network , Infrastructure security, and frontier AI — helping shape practical, scalable solutions that reduce risk, enable trust, and support secure business transformation. This is consistent with the internal positioning of the network & infrastructure security practice as technology-enabled, consulting-led, and globally delivered.
Typical work environment
• Global, cross-functional teams
• Mix of advisory, architecture, engineering, and delivery
• Exposure to strategic client programs and market-shaping offerings
• Opportunity to build reusable assets, accelerators, and modernization patterns consistent with a global delivery model
EY | Building a better working world
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
AI - IT/OT Network & Infrastructure Security – Staff
Role Summary
We are looking for an AI - IT/OT Network & Infrastructure Security Staff professional with solution mindset, who understands & possess knowledge in network security / Infrastructure security concepts, risk and controls concepts, architecture design, transformations that sit at the intersection of enterprise platforms, cybersecurity controls, and AI tools. This role is for a staff professional who should have practical experience in network security engineering, detection engineering, and OT cyber risk reduction, with growing exposure to AI-assisted security operations, prompt engineering, AI-driven anomaly detection, and device behavior analytics.
This role is part of the Cyber Frontier & AI capability focused on enabling scalable, AI-first cyber defense across enterprise and industrial environments.
Key Responsibilities
• Understands design and implementation of network and infrastructure security strategies across enterprise, cloud, and OT environments.
• Drive adoption of Zero Trust, IEC 62443-aligned OT security controls, and advanced segmentation architectures.
• Possess knowledge about deployment and governance of NGFW, NAC, VPN, ZTNA, SASE, DNS security, CASB, and CSPM solutions.
• Incident response and security improvement initiatives to enhance cyber resilience across hybrid infrastructure.
Possess knowledge & experience on secure remote access, DMZ architecture, PLC security, and cloud network protection.
• Good understanding on AI-assisted IT/OT security architecture and operations, enabling predictive threat monitoring and automated response within industrial environments.
• Understands AI-driven anomaly detection models to identify deviations in OT network traffic, process behaviors, and industrial protocols (e.g., Modbus, DNP3, OPC).
• Build AI-based rule optimization frameworks for IT/OT security controls, improving traffic filtering, segmentation policies, and alert accuracy.
• Leverage AI for OT network traffic optimization, enabling intelligent routing, congestion minimization, and adaptive policy enforcement.
• Implement AI-powered device behavior profiling, establishing baselines for PLCs, HMIs, and IoT/IIoT assets to detect unauthorized or abnormal activities.
• Apply AI in PLC code analysis and review, identifying logic anomalies, misconfigurations, and potential security vulnerabilities in industrial control systems.
• Utilize AI/ML for network threat detection, including intrusion detection, lateral movement analysis, and zero-day attack identification in IT/OT environments.
• Design and optimize prompt engineering strategies to effectively leverage GenAI tools for IT/OT security use cases such as incident investigation, log analysis, and threat intelligence enrichment.
• Enable AI-driven continuous monitoring and predictive risk analytics to enhance IT/OT resilience and reduce operational downtime.
• Build reusable methods, accelerators, reference architectures, and runbooks that strengthen the firm’s AI Network & Infrastructure Security offerings and improve repeatability across sectors and accounts.
• Manage client expectations, delivery scope, solution quality, risks, and technical escalations while coaching teams and enabling long-term client capability through documentation and knowledge transfer.
Required Qualifications
• 1–3 years of experience across AI driven Network & Infrastructure security domain, Security architecture, OT security, Zero Trust Security, or related fields.
Professional understanding & knowledge of-
• OT security tools (Nozomi, Claroty, Armis, Dragos, Cisco Cyber Vision) and OT vulnerability management.
• XDR, Zero Trust, and regulatory frameworks (IEC 62443, CIS). Hands-on with NGFWs (Palo Alto, Cisco, Fortinet, Azure Firewall) and VMware virtualization security.
• SSE/SASE platforms (Netskope, Zscaler, Akamai) and secure access technologies (VPN, ZTNA, DNS security).
• Multi-vendor security integration across IT, OT, and cloud environments.
Ideally, you’ll also have
• Good soft skills i.e. verbal & written communication, technical document writing etc
• Strong interpersonal and customer orientation skills
• Prior experience working in Advisory or Technology Consulting industry
• Knowledge of Information security standards and compliances (ISO 27001, ISO 27017, NIST 800 53, NIST 800-207, CISA, CIS benchmark etc)
• Vendor related certifications (e.g. Zscaler, Nozomi, Netskope, Palo Alto Networks, Cisco & others)
Why join us
Join a globally connected cybersecurity practice helping clients protect their network & infra structure security portfolio in an AI-driven world. You will work at the intersection of IT/OT Network , Infrastructure security, and frontier AI — helping shape practical, scalable solutions that reduce risk, enable trust, and support secure business transformation. This is consistent with the internal positioning of the network & infrastructure security practice as technology-enabled, consulting-led, and globally delivered.
Typical work environment
• Global, cross-functional teams
• Mix of advisory, architecture, engineering, and delivery
• Exposure to strategic client programs and market-shaping offerings
• Opportunity to build reusable assets, accelerators, and modernization patterns consistent with a global delivery model
EY | Building a better working world
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
