Global IT/OT Network Architect

Define and maintain global network architecture standards for enterprise, industrial, cloud, and site environments across global sites. Assume full ownership and design authority for global network architecture. Support Bachem’s digital strategy, in particular digital manufacturing and Pharma 4.0 concepts, and provide technical governance for managed service providers, telecom carriers, automation vendors, and OT system integrators. Own a multi-year IT/OT network strategy and roadmap, including modernization, standardization, technical debt reduction, and end-of-life planning. Design secure and resilient OT network architectures for shop-floor and production environments, including IT/OT segmentation using zones, conduits, DMZs, firewalls, VLANs, access controls, and controlled data flows. Ensure local network designs align with global standards and site-specific operational needs by supporting design reviews, commissioning, cutovers, migrations, acceptance testing, and post-implementation validation. Ensure network architecture supports cybersecurity, risk, and GxP compliance requirements across IT and OT by aligning with internal policies and relevant standards such as IEC 62443, ISO 27001, NIST OT security guidance, and ITIL practices. Maintain architecture documentation, including standards, reference architectures, site blueprints, segmentation models, design templates, decision records, exceptions, and risk acceptance documentation. Ensure designs are operationally supportable by IT, OT, site, and managed service teams, and define operational runbooks, support models, escalation paths, and disaster recovery requirements.

Bachem is a leading, innovation-driven company specializing in the development and manufacture of peptides and oligonucleotides. With over 50 years of experience and expertise Bachem provides products for research, clinical development and commercial application to pharmaceutical and biotechnology companies worldwide and offers a comprehensive range of services. Bachem operates internationally with headquarters in Switzerland and locations in Europe, the US and Asia. The company is listed on the SIX Swiss Exchange.

• Extensive experience in network architecture, infrastructure architecture, or senior network engineering in global or multi-site enterprise environments, ensuring GxP compliance.

• Practical experience with OT or industrial networks designing IT/OT segmentation and secure connectivity patterns in manufacturing, pharmaceuticals, or similar environments.

• Experience with architecture governance, technical standards, design documentation (HLD, LLD, standards, reference architectures, diagrams, decision records, and risk documentation).

• CCNP, CCIE, or equivalent enterprise networking certification.

• CISSP, CISM, CRISC, or equivalent security certification in addition to IEC 62443.

• ITIL Foundation or higher, TOGAF or equivalent architecture certification.

• Cloud networking certification for Azure, AWS, or Google Cloud.