Unified Namespace and Plant Data Platform for Multi-Site Manufacturing
Challenge
Security and change-control concerns from OT teams. We worked within plant MOC processes, used read-only connections, and segmented networks so no inbound connection reached the control layer.
Approach
Edge gateways at each site collect data via OPC UA and Modbus from PLCs and DCS systems, and from existing process historians. Data is published to an MQTT broker using a Sparkplug B, ISA-95-aligned topic hierarchy (enterprise/site/area/line/asset). A DMZ architecture following ISA/IEC 62443 zones and conduits keeps OT networks isolated, with one-way data flows to the IT side. In the cloud, data lands in a time-series store and lakehouse for OEE dashboards, energy analytics and batch comparisons.
Outcome
Consistent, contextualised data model across plants Cross-site OEE and energy benchmarking without manual exports Illustratively ~30–50% less engineering time spent gathering data Stronger OT security posture with defined zones and conduits Foundation for predictive maintenance and advanced analytics