Zachry Group

Zachry Group is a century-old industrial infrastructure company - founded in 1924, headquartered in North America - providing turnkey engineering, construction, maintenance, turnaround, and fabrication services across the energy, chemicals, power, manufacturing, and industrial sectors. That's a wide attack surface. Any security team operating here is defending operational technology environments where uptime isn't a KPI, it's the whole game, and where a compromised SCADA system or a ransomware hit on a turnaround schedule means real-world physical risk, not just data loss. The threat model is industrial. Think converged IT/OT networks spanning refinery floors, chemical processing plants, and power generation sites - environments where legacy control systems meet modern connectivity. The company operates on a self-perform execution model, meaning its workforce is directly on-site building and maintaining critical infrastructure. Long-tenured teams and a team-based culture suggest institutional knowledge runs deep, which matters when you're trying to embed security practices into operations that predate modern cybersecurity frameworks. Zachry Group's four core principles - Focus on Distinctive Value, Priority on Customer Success, Right Team in the Right Place, and Adaptive Excellence in Execution - signal an operational philosophy that favors pragmatism over abstraction. For cybersecurity professionals, that likely means security initiatives need to integrate with frontline construction and maintenance workflows, not sit in a silo. The company emphasizes a collaborative, diverse culture where collective results outweigh individual accomplishments, which in practice means cross-functional coordination between security, engineering, and field operations is the norm, not the exception.