Skip to content

Open nowPosted 4 days ago

Senior / Principal Security Architect (OT)

Xcel Energy123 open roles

Where
Denver CO 80205
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior / Principal Security Architect (OT)Xcel Energy · Denver CO 80205
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Xcel Energy's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Xcel Energy postings stay open a median of 24 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 4 days ago

Xcel Energy median: 24 days open

The posting

Xcel Energy (NASDAQ: XEL) is a leading energy provider and Fortune 500 company, dedicated to serving millions of electricity and natural gas customers across eight states: Minnesota, Colorado, Wisconsin, Michigan, North Dakota, South Dakota, New Mexico and Texas. We make energy work better for our customers, helping them thrive every day. That means always raising the bar - delivering better service and providing more reliable, resilient, and sustainable energy.

Xcel Energy is a place where you’ll have opportunities to grow, expand your skills, and help lead the clean energy transition. We offer meaningful rewards, recognition, and support to help you build your career and make an impact - both on the job and beyond. Most importantly, it means you’ll be joining a company that knows employees are the driving force behind its success and is committed to helping you be your best.

Xcel Energy supports a hybrid work model to enable collaboration and flexibility. Many roles are expected to work onsite three days per week (Tuesday–Thursday); however, work location expectations vary based on role, team, and business needs.

Position Summary

The security architect ensures that Xcel’s technology services are designed and delivered securely across both Information Technology (IT) and Operational Technology (OT) environments. This role emphasizes security for industrial and critical infrastructure facilities such as electric substations, gas compressor stations, and generation sites. This is an opportunity to partner with operations and engineering teams to define practical security approaches that protect reliability and safety while enabling business outcomes. A successful candidate will bring hands-on experience in roles such as controls engineering, field technician/field operations, or industrial control system (ICS) design or operations, along with strong security architecture skills. They will advise stakeholders on security methods and practices, champion best practices and standards that reduce risk across Xcel’s footprint, and collaborate with peers across security, technology, and business teams.

Essential Responsibilities

  • OT/ICS Security Architecture: Work with the business to define security patterns and reference architectures for industrial control environments (e.g., SCADA, DCS, PLC/HMI).
  • Network Segmentation & Remote Access: Define and govern segmentation (zones/conduits), secure remote access, and monitoring strategies for OT networks and vendor/contractor connectivity.
  • Governance & Standards: Develop security control baselines, hardening standards, and exception processes for OT assets and supporting infrastructure; ensure compliance drift is managed.
  • Operational Collaboration: Partner with controls engineering, field technicians, plant operations, and maintenance teams to implement security improvements that work in real-world operating environments.
  • Incident Readiness: Improve detection and response for OT environments, including logging/telemetry requirements, playbooks, and tabletop exercises with operations.
  • Documentation and Reusability: Create products such as use cases and implementation patterns.
  • Regulation and Compliance: Ensure adherence to regulatory frameworks such as NERC CIP and TSA Security Directive 2, including applicability to OT facilities and supporting IT/cloud services where used.

Minimum Requirements (Senior Security Architect) – comp range: $112,200 - 159,400

  • Minimum of 8 years’ experience in IT including 5 years’ direct experience in IT engineering and cyber security.
  • Demonstrated verbal/written communication and presentation skills.
  • Demonstrated experience collaborating with internal stakeholders, 3rd parties, and management.
  • Ability to influence without direct authority.
  • Experience with technology implementation projects for enterprise-scale organizations.

Minimum Requirements (Principal Security Architect) – comp range: $129,000 – 183,200

  • 5 years of experience in systems architecture or systems engineering.
  • 10 years of experience in Information Security.
  • 3 years of experience designing complex systems.
  • 3 years of experience with systems integration and engineering.
  • Strong oral and written communication skills.
  • Must be able to understand and respond to clients' business needs.
  • Demonstrated experience collaborating with internal employees, third parties, and management to develop solutions and ensure stakeholder buy-in.
  • Ability to influence without direct authority.
  • Preferred: Information Security experience in the electric utility industry.
  • Preferred: Experience with technology implementation projects for enterprise-scale organizations.

Preferred Requirements

  • 5+ years of experience in security architecture, cybersecurity engineering, or control systems engineering, including work that interfaces with industrial/OT environments.
  • Hands-on experience with OT/ICS technologies and environments (e.g., SCADA, PLC/HMI, DCS) and the operational constraints of critical infrastructure.
  • Knowledge of network segmentation concepts and secure remote access patterns for OT/vendor connectivity.
  • Experience with OT security frameworks and guidance (e.g., IEC 62443, NIST SP 800-82) and applying them pragmatically in operating environments.
  • Experience working with vendors/contractors supporting industrial equipment and control systems, including secure access and support models.
  • Certifications such as GICSP, CISSP, CCSP, CCSK, or AWS Certified Security.
  • Knowledge of relevant regulations and compliance requirements such as NERC CIP, TSA, and 10 CFR 810.

Our culture is grounded in shared values and employee commitments that guide how we work, support one another, and grow together.

Our Values

Connected, Committed, Trustworthy, Safe

Our Employee Commitments

  • Work that makes a difference
  • A team you can count of
  • Opportunities to grow
  • Rewards that help you thrive

Xcel Energy provides job applicants reasonable accommodations for disabilities throughout the application process. If you are in need of an accommodation to complete the application process, now or at any time in the future, please complete the Applicant Accommodation Request Form.

Non-Bargaining

The anticipated starting base pay for this position is: $130,000.00 to $183,200.00 per year

This position is eligible for the following benefits: Annual Incentive Program, Medical/Pharmacy Plan, Dental, Vision, Life Insurance, Dependent Care Flexible Spending Account, Health Care Flexible Spending Account, Health Savings Account (HSA) (if enrolled in eligible health plan), Limited-Purpose FSA (if enrolled in eligible health plan and HSA), Transportation Reimbursement Account, Short-term disability (STD), Long-term disability (LTD), Employee Assistance Program (EAP), Fitness Center Reimbursement (if enrolled in eligible health plan), Tuition reimbursement, Transit programs, Employee recognition program, Pension, 401(k) plan, Paid time off (PTO), Holidays, Volunteer Paid Time Off (VPTO), Parental Leave

Benefit plans are subject to change and Xcel Energy has the right to end, suspend, or amend any of its plans, at any time, in whole or in part.

In any materials you submit, you may redact or remove age-identifying information including but not limited to dates of school attendance and graduation. You will not be penalized for redacting or removing this information.

Deadline to Apply: 11/01/26

EEO is the Law (PDF) | Equal Opportunity Statement (PDF) | Employee Rights (PDF)

All Xcel Energy employees and contractors share responsibility for protecting the company's information and systems by adhering to cybersecurity policies, standards, and best practices, recognizing that cybersecurity is everyone's responsibility.

Accessibility Statement

Xcel Energy endeavors to make https://www.xcelenergy.com and https://jobs.xcelenergy.com accessible to any and all users. If you are in need of an accommodation to complete the application process, now or at any time in the future, please complete the Applicant Accommodation Request Form. For any other application related questions, including application follow-ups or technical issues, please use our Recruiting Assistance, Electra, for assistance. Electra can be found in the lower right-hand corner of our Xcel Energy Careers site.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Xcel Energy's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Xcel Energy's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Xcel Energy's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.