IT/OT Identity Separation Lead

Overview of project/skills required:

• We are seeking a highly experienced IT/OT Identity Separation Lead with proven, hands-on experience delivering large-scale identity separation and carve-out initiatives across complex enterprise environments.

• The ideal candidate has successfully led both greenfield and brownfield IT/OT identity separation projects, integrating cybersecurity, identity governance, and operational technology while minimizing business disruption.

Key Responsibilities

• Lead the planning and execution of enterprise-scale IT/OT identity separation programs for mergers, acquisitions, divestitures, and organizational transformations.

• Design and implement identity architectures for both greenfield environments and brownfield legacy environments.

• Assess current-state identity ecosystems and develop future-state architectures supporting independent IT and OT operations.

• Define and execute identity separation strategies for:

o Active Directory / Microsoft Entra ID

o OT Active Directory domains

o Privileged Access Management (PAM)

o Identity Governance & Administration (IGA)

o Multi-Factor Authentication (MFA)

o PKI and certificate services

o Service accounts and non-human identities

• Coordinate identity migrations across enterprise applications, manufacturing systems, industrial control systems (ICS), and OT environments.

• Develop migration waves, cutover plans, rollback strategies, and risk mitigation approaches.

• Partner with cybersecurity, infrastructure, networking, manufacturing engineering, application owners, and business stakeholders to ensure secure and seamless separation.

• Identify dependencies across identity, networking, DNS, PKI, ERP, MES, SCADA, historians, and manufacturing applications.

• Ensure adherence to cybersecurity frameworks including NIST CSF, IEC 62443, ISA/IEC standards, and Zero Trust principles.

• Provide technical leadership while remaining deeply involved in architecture, design, troubleshooting, and implementation activities.

Required Qualifications

• 10+ years of enterprise Identity & Access Management (IAM) experience.

• Demonstrated success leading large-scale IT/OT identity separation initiatives.

• Hands-on delivery experience with both:

o Greenfield identity implementations

o Brownfield identity modernization and separation projects

Strong expertise in:

o Microsoft Active Directory

o Microsoft Entra ID (Azure AD)

o Identity Governance (SailPoint, Saviynt, etc.)

o Privileged Access Management (CyberArk, BeyondTrust, Delinea, etc.)

o MFA and Conditional Access

o DNS, DHCP, PKI, Group Policy, Kerberos, LDAP

Deep understanding of OT environments including:

o Industrial Control Systems (ICS)

o SCADA

o Manufacturing Execution Systems (MES)

o PLC environments

• Experience with mergers, acquisitions, divestitures, or enterprise carve-outs.

• Strong knowledge of identity migration strategies, coexistence models, trust relationships, and directory synchronization.

• Excellent stakeholder management and cross-functional leadership skills.

Preferred Qualifications

• Experience in highly regulated industries such as manufacturing, pharmaceuticals, energy, utilities, or critical infrastructure.

• Knowledge of Zero Trust architecture and OT cybersecurity.

• Experience with cloud identity modernization and hybrid identity environments.

• Relevant certifications such as CISSP, GIAC, Microsoft Identity, CyberArk, SailPoint, or IEC 62443 are preferred.