Open to opportunities

Tapan Ghetiya

@tapanghetiya

Message

IT/OT Network & Security Architect securing critical infrastructure

India

Message

What I'm looking for

I’m looking to lead IT/OT security architecture for critical infrastructure—running IEC 62443-aligned assessments, delivering Purdue Model segmentation, and enabling OT visibility with minimal disruption—while partnering with CISOs on practical, multi-year roadmaps.

I’m an IT/OT Security Architect with 10+ years in network and cybersecurity, focused on securing OT network boundaries across critical infrastructure. I lead IEC 62443 SL-2 aligned OT/ICS security assessments, produce structured risk findings, and drive remediation roadmaps for environments spanning Level 0–3 of the Purdue Model.

I design IT/OT network segmentation architectures with OT DMZ controls, jump server policies, and gateway recommendations, and I deploy passive monitoring platforms like Claroty and Armis for OT visibility without disrupting operations. With a strong enterprise foundation in firewalls, NAC, and cloud security (Azure firewall solutions), I bridge IT and OT security programs and partner with CISOs to define multi-year OT/IT security roadmaps.

Experience

Work history, roles, and key accomplishments

Current

IT/OT Security Architect

Current

Adani Enterprise Ltd.

Nov 2023 - Present (2 years 6 months)

Led OT/ICS security assessments across 8+ critical infrastructure verticals, identifying exposures across Level 0–3 of the Purdue Model and producing IEC 62443 SL-2 aligned risk findings with remediation roadmaps. Deployed Armis for passive OT asset discovery and threat detection, designed Purdue Model-based OT segmentation, and delivered Azure cloud firewall solutions while resolving Priority 1 i

Armis Passive Monitoring Firewall Policy Design Azure Firewall Jump Server Controls OT Risk Remediation Roadmaps

Sr. IT System Engineer

Citrix R&D Pvt. Ltd.

Sep 2021 - Nov 2023 (2 years 2 months)

Designed and implemented IT/OT network segregation in the data center environment using firewall policy design and VLAN-based access controls. Led a global Cisco ISE NAC rollout (12-node distributed) with posture assessment, SGT/ACL-based micro-segmentation, AnyConnect provisioning, and supported network migrations and security operations including MFA rollouts.

Cisco AnyConnect SGT ACL Micro Segmentation Posture Assessment Meraki SD WAN Migration VLAN Network Security SOPs

Sr. Network & Security Engineer

NTT Global Networks

Dec 2019 - Sep 2021 (1 year 9 months)

Deployed Cisco ISE-based 802.1x authentication across PAN India branches and NOC locations, integrating with Aruba WLC. Executed ISE 2.6 distributed deployment (8-node with load balancer for PSN services) and applied SGT/ACL-based segmentation and access control for secure boundary enforcement between sensitive operational and corporate networks.

Cisco ISE (V2.6 Distributed)Aruba WLC Integration SGT ACL Segmentation NAC Posture Endpoint Profiling PSN Services Load Balancing Access Control PAN India Rollout

Security Analyst - L2

Paladion Networks Pvt. Ltd.

May 2019 - Nov 2019 (6 months)

Analyzed security event data across heterogeneous environments, including network and industrial system logs, and generated incident response reports aligned to established SOPs. Coordinated with SMEs on infrastructure changes based on incident findings and supported security improvements across IT and OT-adjacent environments.

Incident Response Network Security Monitoring Stakeholder SME Coordination

Sr. Network & Security Engineer

Meridian Infotech Ltd.

Aug 2016 - Apr 2019 (2 years 8 months)

Delivered IT/OT network segregation for multiple industrial and enterprise customers by designing firewall policies, zone-based segmentation, and access controls to isolate OT environments from corporate IT networks. Implemented NGFW solutions (Cisco Firepower and Fortinet) with OT-aware security policies and supported IT/OT convergence while maintaining operational continuity.

Network Segregation NGFW Policies Cisco Firepower Fortinet OT Aware Security Policies Cisco ISE Network Access Control

Network Engineer

IBM (Net Connect Pvt. Ltd.)

Feb 2015 - Aug 2016 (1 year 6 months)

Implemented and troubleshot enterprise routers, switches, and network components, supporting network infrastructure operations for critical business connectivity. Maintained uptime by resolving operational issues and supporting ongoing network availability needs.

Enterprise Networking Network Troubleshooting Network Operations Uptime Availability Support