Staff Cybersecurity Architect

Description

The role is a senior architecture position that advises the CISO on network security across both IT and OT environments.

The company makes equipment, systems, digital solutions and services for freight and transit rail, and also serves ports, logistics, mining, industrial and marine sectors. It has more than 150 years in business and about 30,000 employees worldwide.

Responsibilities

• Review current IT and OT network security designs, find risks and gaps, and suggest improvements.
• Work with business, infrastructure, cloud and networking teams to set requirements and priorities.
• Build and keep up a network security roadmap that is based on risk and matches business and cybersecurity strategy.
• Write network security standards, reference architectures and approved design patterns.
• Design secure on-premises, cloud and hybrid networks.
• Cover segmentation, Zero Trust, remote access, DNS, perimeter and cloud networking in your designs.
• Check network designs against security standards and the target-state architecture.
• Guide teams as they put approved architectures into projects, confirm controls work as intended, and help move systems from current state to target state.
• Lead and advise engineers, project teams and other architects.
• Act as the link between security leadership and architecture, infrastructure, cloud, networking and business teams.
• Present assessments, recommendations and roadmaps to leadership.
• Encourage security-by-design and push recommendations until teams adopt them.

Requirements

• A bachelor's or master's degree in cybersecurity, computer science, information systems, engineering or a related field, or equivalent experience.
• At least 5 years in cybersecurity, including substantial network security architecture work.
• Solid knowledge of security frameworks and architecture methods, plus LAN, WAN, WLAN and SD-WAN, segmentation, Zero Trust, cloud networking, IAM, perimeter security and secure remote access.
• Hands-on experience with assessments, gap analyses, roadmaps, firewall designs and network security controls.
• Strong communication, leadership, stakeholder management and execution skills.
• Preferred certifications: CISSP, CCSP, CISM, TOGAF, SABSA, Cisco or Fortinet.
• Preferred technical experience: Cisco Secure Client and Cisco Secure Access.
• Preferred technical experience: Fortinet platforms and perimeter firewalls.
• Preferred technical experience: AWS networking and security controls.
• Preferred technical experience: network segmentation, Zero Trust and OT/ICS architecture.
• Preferred technical experience: OT environments and AI.

Conditions

Job titles at the company may cover more than one career level.

The posted base salary is $104800-149300. The final offer may depend on training, transferable skills, experience, education, business needs, market demand and work location.

The base pay range may change over time.

The company is an equal opportunity employer and asks you to say if you need an accommodation during the process.

Benefits

• Health, welfare and retirement benefits.
• Possible annual bonus, depending on eligibility.