Postgraduate Diploma in Secure OT/IT Integration with MQTT
Online 800-hour Postgraduate Diploma in Secure OT/IT Integration with MQTT. 8 modules covering ISO/IEC 20922, OASIS MQTT Version 5.0 and Eclipse Mosquitto. Assigned tutor and open enrolment.
Take the controls.
Run a real engineering trade-off from this field. Move the sliders, watch the model react in real time and beat the challenge.
What you will be able to do
Analyse the risks and requirements of OT/IT convergence.
Master the operation of the MQTT protocol and its QoS levels.
Model industrial data with Sparkplug B.
Configure MQTT brokers with TLS, certificates and access control.
Design secure integration architectures between plant and cloud.
Monitor and respond to incidents in IIoT integrations.
Meet the requirements of NIS2 and the Cyber Resilience Act.
Who it's for
- OT/IT integration engineer who wants to specialise in Secure OT/IT Integration with MQTT.
- Industrial cybersecurity specialist who wants to specialise in Secure OT/IT Integration with MQTT.
- IIoT architect who wants to specialise in Secure OT/IT Integration with MQTT.
- Industrial network engineer who wants to specialise in Secure OT/IT Integration with MQTT.
- Edge solutions developer who wants to specialise in Secure OT/IT Integration with MQTT.
- Plant data engineer who wants to specialise in Secure OT/IT Integration with MQTT.
- Graduates in engineering or sciences looking to enter discrete manufacturing.
What you'll work with
- ISO/IEC 20922
- OASIS MQTT Version 5.0
- Eclipse Sparkplug 3.0
- IEC 62443-3-3
- IEC 62443-4-2
- Directiva (UE) 2022/2555
- Reglamento (UE) 2024/2847
- NIST SP 800-82
8 modules · 800 h
1.1Differences in requirements between OT and IT1.2The Purdue model and its levels1.3Vertical data flows in the plant1.4The Unified Namespace as an architecture1.5Risks of OT/IT connection1.6Zones and conduits according to IEC 624431.7Industrial DMZ and boundary brokers1.8Shared governance between OT and IT teams1.9Inventory of assets and existing protocols1.10Practical: mapping data flows of a plant
2.1Publish-subscribe model and broker2.2Topic structure and wildcards2.3QoS quality of service levels2.4Persistent sessions and retained messages2.5Last Will and Testament2.6What's new in MQTT 5.02.7Mosquitto, HiveMQ and EMQX brokers2.8Broker performance and scalability2.9Topic design patterns for the plant2.10Laboratory: deploying a Mosquitto broker
3.1Sparkplug B specification3.2Edge nodes and devices3.3Birth and death messages3.4Session state management3.5Encoding with Protocol Buffers3.6Designing topic hierarchies3.7PLC integration through gateways3.8Tools compatible with Sparkplug3.9Managing changes to metric definitions3.10Workshop: Sparkplug edge node with Node-RED
4.1Transport encryption with TLS4.2Authentication with X.509 certificates4.3User and token authentication4.4Access control lists by topic4.5Key and certificate management4.6Protection against denial of service4.7Broker logging and auditing4.8Hardening the broker server4.9Security of MQTT clients on embedded devices4.10Practical: broker with mutual TLS and ACLs
5.1Data diodes and unidirectional flow5.2Bridges between OT and IT brokers5.3OPC UA to MQTT gateways5.4Segmentation with industrial firewalls5.5Remote access for vendors5.6Integration with cloud IoT platforms5.7Architectures from edge to cloud5.8Resilience patterns and local storage5.9Data normalisation for IT consumption5.10Laboratory: bridge between plant broker and cloud
6.1Monitoring brokers and clients6.2Anomaly detection in MQTT traffic6.3Traffic analysis with Wireshark6.4Integration with SIEM6.5Incident management in integrations6.6Penetration testing in IIoT6.7Vulnerability management6.8Continuity of messaging service6.9Message logging and data retention6.10Case study: detecting a malicious client
7.1Requirements of the NIS2 Directive7.2Requirements of the Cyber Resilience Act7.3Product certification under IEC 62443-4-27.4NIST guidance for OT7.5Evaluating software suppliers7.6Architecture documentation7.7Training mixed teams7.8Roadmap for secure convergence7.9Contracts and service level agreements7.10Case study: auditing an MQTT integration
8.1Plant analysis and requirements8.2Design of zones and conduits8.3Topic model and Sparkplug8.4Deployment of the secure broker8.5Gateways and bridges to the cloud8.6Monitoring plan8.7Security testing8.8Analysis of results8.9Report and presentation8.10Final review with the tutor
How you'll learn
100% online training on the SEIUM campus, with downloadable material, recorded classes and an assigned technical tutor. No fixed timetable: students progress at their own pace within the intake, which makes it possible to combine study with work.
Each module combines theory, guided reading of the original standard and applied exercises. The software used is Eclipse Mosquitto, HiveMQ, Node-RED, Wireshark, Ignition, in free, academic or evaluation versions. Tests are studied using real deployment procedures for MQTT brokers with mutual TLS, PLC integration via Sparkplug B, and secure bridges between plant and cloud. Assessment is continuous across each module plus the final integrating project.
Build it end to end
Your final project follows the real engineering workflow, step by step, reviewed by your tutor.
Analyse the risks and requirements of OT/IT convergence.
Master the operation of the MQTT protocol and its QoS levels.
Model industrial data with Sparkplug B.
Configure MQTT brokers with TLS, certificates and access control.
Design secure integration architectures between plant and cloud.
Where this takes you
Requirements
- Prior technical training or professional experience in the sector. A university degree is not required.
- Internet connection and a computer capable of running the programme's software.
- Sufficient Spanish to follow technical standards documentation.
Ready to start?
Send your application today. Our admissions team replies within 72 hours with your study plan and funding options.
Frequently asked questions
The programme totals 800 hours, spread over 6 to 8 months. That is an average of 10 to 15 hours per week, compatible with a full-time job.
The programme uses Eclipse Mosquitto, HiveMQ, Node-RED, Wireshark and Ignition. Free, academic or evaluation versions are used, and the tutor indicates the free alternative where one exists.
A SEIUM own diploma upon passing the continuous assessment and the integrating project. This is in-house training, not an official qualification from the Ministry.
Yes. Modules passed in a course or postgraduate diploma in the same area are credited towards the advanced programme. Check the credit transfer policy when you enrol.
Related programmes
Postgraduate Diploma in Dynamic Reconfiguration and Cooperative Control
800-hour online Postgraduate Diploma in Dynamic Reconfiguration and Cooperative Control. 8 modules covering ISO 10218-2, ISO 3691-4 and ROS 2 with Nav2. Assigned tutor and open…
Postgraduate Diploma in Tuning, Stability and Verification
Online 800-hour postgraduate diploma in tuning, stability and verification. 8 modules covering IEC 61131-3, IEC 61508 and MATLAB with Control System Toolbox. Dedicated tutor and open…
Postgraduate Diploma in Virtual-Plant Correlation and Ramp-Up
Online 800-hour Postgraduate Diploma in Virtual-Plant Correlation and Ramp-Up. 8 modules covering VDI 3693 Blatt 1, ISO 23247-1:2021 and Siemens Process Simulate. Assigned tutor and enrolment…
More in Robotics, Automation & Control
All Robotics, Automation & Control programmes → · How to apply · Fees & financing · Scholarships