Staff Cybersecurity Architect

About the role

Wabtec is looking for an experienced Staff Cybersecurity Architect to advise the CISO, assess the current network security architecture, define target-state designs and guide secure, scalable implementation across IT and OT environments. The role calls for deep expertise in network security, cloud and perimeter technologies, segmentation and practical architecture patterns that enterprise teams can implement and operate.

Key responsibilities

• Assess IT and OT network security architectures, identify risks and gaps, and partner with business, infrastructure, cloud and networking teams to define requirements and priorities.
• Develop and maintain a risk-based network security roadmap aligned to business and cybersecurity strategy.
• Establish network security standards, reference architectures and approved design patterns, and design secure on-premises, cloud and hybrid networks.
• Define segmentation, Zero Trust, remote access, DNS, perimeter and cloud networking patterns, and review designs against security standards.
• Guide implementation of approved architectures, validate that security controls are effective, support migration to target-state architectures and lead engineers, project teams and architects.
• Act as liaison between security leadership, architecture, infrastructure, cloud, networking and business teams, present assessments and roadmaps to leadership and promote security-by-design.

Required profile

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Information Systems, Engineering or equivalent experience.
• 5+ years of cybersecurity experience, including significant network security architecture experience.
• Strong knowledge of security frameworks, LAN/WAN/WLAN/SD-WAN, segmentation, Zero Trust, cloud networking, IAM, perimeter security and secure remote access.
• Experience developing assessments, gap analyses, roadmaps, firewall designs and network security controls.
• Excellent communication, leadership, stakeholder management and execution skills.

Required skills

• Preferred certifications: CISSP, CCSP, CISM, TOGAF, SABSA, Cisco or Fortinet.
• Preferred technical experience: Cisco Secure Client / Secure Access, Fortinet platforms and perimeter firewalls, AWS networking and security controls, network segmentation, Zero Trust and OT/ICS architecture, OT environments and AI experience.

The salary range listed is $104,800-$149,300, depending on experience, education, location and market conditions. Benefits include health, welfare and retirement options, and possibly an annual bonus.