Principal Cyber Security Architect (Infrastructure & Manufacturing)

About the role

Dyson is looking for a Principal Cyber Security Architect for Infrastructure and Manufacturing Security. As the technical authority for security architecture, you will cover enterprise infrastructure, manufacturing environments, operational technology, industrial IoT and the systems behind Dyson's engineering, supply chain and production operations. The role owns architecture direction, reference patterns, security standards and capability roadmaps spanning network, server, storage, database, identity, cloud, OT and industrial control systems.

Key responsibilities

• Define target-state security architectures for enterprise infrastructure, manufacturing networks, industrial platforms and OT environments, including Purdue Model segmentation (Levels 0-5), industrial DMZs, conduit design, trust boundaries and secure remote access.
• Lead architecture reviews for manufacturing facilities, factories, R&D labs, warehouses and supply-chain platforms.
• Design resilient network architectures (campus, WAN, SD-WAN, datacentre, cloud connectivity, firewalls, NAC, DNS security, micro-segmentation, Zero Trust).
• Define hardened server, virtualisation, hypervisor, container and storage patterns, and database security for Oracle, SQL Server, PostgreSQL and distributed platforms.
• Define OT and IIoT controls for PLCs, HMIs, SCADA, historians, engineering workstations and manufacturing execution systems, aligned to IEC 62443, NIST 800-82 and the Purdue Model.
• Lead threat modelling against ransomware, supply-chain compromise, lateral movement and loss-of-control scenarios, and drive secure onboarding of connected assets.
• Work with engineering and operations teams on compensating controls for legacy OT systems and on security requirements for remote access, third parties and maintenance partners.
• Provide senior technical leadership during cyber incidents affecting enterprise or manufacturing environments.

Required profile

• Extensive experience designing and implementing security architectures across network, server, storage, database, cloud, identity and manufacturing environments.
• Proven implementation of Purdue Model segmentation, industrial DMZs, OT zoning and secure conduits.
• Deep understanding of ICS and OT technologies (PLCs, SCADA, DCS, MES, Modbus, Profinet, EtherNet/IP, OPC-UA, MQTT).
• Strong enterprise network architecture expertise (routing, switching, firewalls, NAC, SD-WAN, micro-segmentation) and hands-on architecture across Windows, Linux, virtualisation, Kubernetes and hybrid cloud.
• Experience implementing Zero Trust and defining technical standards, reference architectures and audit-defensible requirements.
• Ability to influence executive stakeholders while working with engineering, manufacturing, infrastructure, network and operations teams.