Senior / Principal Security Architect (OT)
Xcel EnergyDenver, CO
Full Time
Posted October 20, 2026
$112k - $159k
Apply Now
Application opens on company website
Listing evidence and provenance
- Source
- Workday View original listing
- Freshness
- Open in the current public read path; this is not an employer guarantee.Last observed October 21, 2026
- Classification
- Modern power-system classification not yet published for this listing.Legacy source industry field: Utilities
- Pay provenance
- Employer-provided pay
Job Description
Connected, Committed, Trustworthy, Safe
Key Responsibilities
- The security architect ensures that Xcel’s technology services are designed and delivered securely across both Information Technology (IT) and Operational Technology (OT) environments. This role emphasizes security for industrial and critical infrastructure facilities such as electric substations, gas compressor stations, and generation sites. This is an opportunity to partner with operations and engineering teams to define practical security approaches that protect reliability and safety while enabling business outcomes. A successful candidate will bring hands-on experience in roles such as controls engineering, field technician/field operations, or industrial control system (ICS) design or operations, along with strong security architecture skills. They will advise stakeholders on security methods and practices, champion best practices and standards that reduce risk across Xcel’s footprint, and collaborate with peers across security, technology, and business teams.
- OT/ICS Security Architecture: Work with the business to define security patterns and reference architectures for industrial control environments (e.g., SCADA, DCS, PLC/HMI).
- Network Segmentation & Remote Access: Define and govern segmentation (zones/conduits), secure remote access, and monitoring strategies for OT networks and vendor/contractor connectivity.
- Governance & Standards: Develop security control baselines, hardening standards, and exception processes for OT assets and supporting infrastructure; ensure compliance drift is managed.
- Operational Collaboration: Partner with controls engineering, field technicians, plant operations, and maintenance teams to implement security improvements that work in real-world operating environments.
- Incident Readiness: Improve detection and response for OT environments, including logging/telemetry requirements, playbooks, and tabletop exercises with operations.
- Documentation and Reusability: Create products such as use cases and implementation patterns.
- Regulation and Compliance: Ensure adherence to regulatory frameworks such as NERC CIP and TSA Security Directive 2, including applicability to OT facilities and supporting IT/cloud services where used.
- Minimum Requirements (Senior Security Architect) – comp range: $112,200 - 159,400
- Minimum of 8 years’ experience in IT including 5 years’ direct experience in IT engineering and cyber security.
- Demonstrated verbal/written communication and presentation skills.
- Demonstrated experience collaborating with internal stakeholders, 3rd parties, and management.
- Ability to influence without direct authority.
- Experience with technology implementation projects for enterprise-scale organizations.
- Minimum Requirements (Principal Security Architect) – comp range: $129,000 – 183,200
- 5 years of experience in systems architecture or systems engineering.
- 10 years of experience in Information Security.
- 3 years of experience designing complex systems.
- 3 years of experience with systems integration and engineering.
- Strong oral and written communication skills.
- Must be able to understand and respond to clients' business needs.
- Demonstrated experience collaborating with internal employees, third parties, and management to develop solutions and ensure stakeholder buy-in.
- Preferred: Information Security experience in the electric utility industry.
- Preferred: Experience with technology implementation projects for enterprise-scale organizations.
Requirements
- 5+ years of experience in security architecture, cybersecurity engineering, or control systems engineering, including work that interfaces with industrial/OT environments.
- Hands-on experience with OT/ICS technologies and environments (e.g., SCADA, PLC/HMI, DCS) and the operational constraints of critical infrastructure.
- Knowledge of network segmentation concepts and secure remote access patterns for OT/vendor connectivity.
- Experience with OT security frameworks and guidance (e.g., IEC 62443, NIST SP 800-82) and applying them pragmatically in operating environments.
- Experience working with vendors/contractors supporting industrial equipment and control systems, including secure access and support models.
- Certifications such as GICSP, CISSP, CCSP, CCSK, or AWS Certified Security.
- Knowledge of relevant regulations and compliance requirements such as NERC CIP, TSA, and 10 CFR 810.
- Our culture is grounded in shared values and employee commitments that guide how we work, support one another, and grow together.
Ready to Apply?
Apply directly on Xcel Energy's site
Get new power and energy jobs weekly
New jobs across data centers, grid, nuclear, storage, generation, and renewables. One email a week.
Job Alerts
Get alerts for jobs like this one
More at Xcel Energy
Similar Jobs
More jobs at Xcel Energy
Similar jobs in Utilities
SI
More jobs in Denver, CO
PR
Is this your company?Claim your listing free →