Global IT/OT Network Architect (a), 100%

Global IT/OT Network Architect (a), 100%

Bachem is a leading, innovation-driven company specializing in the development and manufacture of peptides and oligonucleotides. With over 50 years of experience and expertise Bachem provides products for research, clinical development and commercial application to pharmaceutical and biotechnology companies worldwide and offers a comprehensive range of services. Bachem operates internationally with headquarters in Switzerland and locations in Europe, the US and Asia. The company is listed on the SIX Swiss Exchange. For further information, see www.bachem.com.

To drive our continuous organic growth, we are constantly looking for highly qualified professionals. To strengthen our team in the Global IT department, we are looking for a dedicated Global IT/OT Network Architect (f/m/d), 100%.

The Global IT/OT Network Architect defines and governs the company’s global network architecture across enterprise IT and operational technology environments, directly supporting Bachem’s digital strategy (digital manufacturing, pharma 4.0 concepts). 

The role combines full ownership and design authority of enterprise & industrial/OT network architecture, and site-level solution architecture for offices, production environments, warehouses, and laboratories, including a multi-year IT/OT network strategy and roadmap. 

The role ensures that IT and OT networks are secure, resilient, scalable, standardized, maintainable, and aligned with business, operational, cybersecurity, and GxP compliance requirements. 

Your tasks:

• Define and maintain global network architecture standards for enterprise, industrial, cloud, and site environments across global sites. Assume full ownership and design authority for global network architecture. 

• Support Bachem’s digital strategy, in particular digital manufacturing and Pharma 4.0 concepts, and provide technical governance for managed service providers, telecom carriers, automation vendors, and OT system integrators. 

• Own a multi-year IT/OT network strategy and roadmap, including modernization, standardization, technical debt reduction, and end-of-life planning. 

• Design secure and resilient OT network architectures for shop-floor and production environments, including IT/OT segmentation using zones, conduits, DMZs, firewalls, VLANs, access controls, and controlled data flows. 

• Ensure local network designs align with global standards and site-specific operational needs by supporting design reviews, commissioning, cutovers, migrations, acceptance testing, and post-implementation validation. 

• Ensure network architecture supports cybersecurity, risk, and GxP compliance requirements across IT and OT by aligning with internal policies and relevant standards such as IEC 62443, ISO 27001, NIST OT security guidance, and ITIL practices. 

• Maintain architecture documentation, including standards, reference architectures, site blueprints, segmentation models, design templates, decision records, exceptions, and risk acceptance documentation. 

• Ensure designs are operationally supportable by IT, OT, site, and managed service teams, and define operational runbooks, support models, escalation paths, and disaster recovery requirements. 

Your profile:

• Extensive experience in network architecture, infrastructure architecture, or senior network engineering in global or multi-site enterprise environments, ensuring GxP compliance. 

• Practical experience with OT or industrial networks designing IT/OT segmentation and secure connectivity patterns in manufacturing, pharmaceuticals, or similar environments. 

• Experience with architecture governance, technical standards, design documentation (HLD, LLD, standards, reference architectures, diagrams, decision records, and risk documentation). 

• CCNP, CCIE, or equivalent enterprise networking certification. 

• CISSP, CISM, CRISC, or equivalent security certification in addition to IEC 62443. 

• ITIL Foundation or higher, TOGAF or equivalent architecture certification. 

• Cloud networking certification for Azure, AWS, or Google Cloud. 

Our offer:

• A dynamic and rapidly growing work environment with internal development and training opportunities

• Flexible working hours with home office days and an option for obtaining additional vacation days through workload reduction
• Company‑run daycare center on the Bachem Campus in Bubendorf
• 60% coverage of pension fund contributions by Bachem AG as well as option for extra-mandatory pension provision with our Pension Plan Plus
• Access to benefits platforms with discounts from external partners
• Fresh, healthy and varied food in our staff restaurant
• A wide range of free sports activities on the Bachem Campus

Would you like to drive innovation together with us?

We look forward to receiving your complete application documents via our application portal.

Learn more about the Bachem Group and get inspired by our exciting work environment at our location in Bubendorf!

At Bachem, you’ll find a diverse, multicultural team. The (a)in the job title stands for all. We welcome applications from all candidates. What matters are your skills and motivation—regardless of age, gender, background, religion, or sexual orientation.

Please note: unsolicited resumes from recruitment agencies will not be considered.