Global IT/OT Network Architect (a), 100%

Bachem seeks a Senior Global IT/OT Network Architect in Bubendorf to define and govern enterprise and industrial network strategies, ensuring security, compliance, and alignment with digital manufacturing goals.

This position holds full ownership and design authority for the company’s global network architecture, spanning both enterprise IT and operational technology (OT) environments. The role is central to Bachem’s digital strategy, particularly in supporting digital manufacturing and Pharma 4.0 initiatives. The architect ensures that all network designs are secure, resilient, and compliant with GxP and cybersecurity standards while providing technical governance over external vendors and service providers.

Responsibilities

• Establish and uphold global standards for network architecture across enterprise, industrial, cloud, and site-specific environments.
• Lead the creation and execution of a multi-year IT/OT network strategy, focusing on modernization, standardization, and the reduction of technical debt.
• Design secure OT network structures for production and shop-floor areas, implementing segmentation via zones, DMZs, firewalls, and controlled data flows.
• Provide technical governance for managed service providers, telecom carriers, and automation vendors to ensure alignment with business goals.
• Support local site implementations through design reviews, commissioning, migrations, and post-implementation validation to ensure global standards are met.
• Maintain comprehensive architecture documentation, including reference architectures, site blueprints, decision records, and risk acceptance logs.
• Define operational support models, runbooks, escalation paths, and disaster recovery requirements to ensure designs are maintainable by IT and OT teams.
• Ensure all network designs adhere to cybersecurity policies and regulatory frameworks such as IEC 62443, ISO 27001, and NIST OT security guidance.

Requirements

• Extensive background in network or infrastructure architecture within global, multi-site enterprises, with a focus on GxP compliance.
• Hands-on experience designing IT/OT segmentation and secure connectivity patterns in manufacturing or pharmaceutical settings.
• Proficiency in architecture governance and creating detailed design documentation, including high-level/low-level designs and risk assessments.
• Possession of a CCNP, CCIE, or equivalent enterprise networking certification.
• Security certifications such as CISSP, CISM, or CRISC, alongside knowledge of IEC 62443.
• Certification in ITIL Foundation or higher, or TOGAF or an equivalent architecture framework.
• Cloud networking certification for at least one major provider: Azure, AWS, or Google Cloud.

What the company offers

• Opportunities for internal professional development and training.
• Flexible working hours, remote work options, and the ability to earn extra vacation days through workload management.
• Access to a company-run daycare center on the Bubendorf campus.
• 60% coverage of pension fund contributions by Bachem AG, plus an optional extra-mandatory pension plan.
• Discounts through external partner benefits platforms.
• Fresh, healthy, and varied meals in the staff restaurant.
• Free access to a wide range of sports activities on the Bachem Campus.

About the company

Bachem operates as a dynamic and rapidly growing organization, fostering an environment that encourages professional growth and active engagement among its employees.

• Dynamic and fast-paced work environment.
• Rapidly growing company culture.

How to apply

Documents to submit:

• Complete application documents