FULLY REMOTE Staff Cybersecurity Architect

Job DescriptionStaff Cybersecurity ArchitectPosition Summary:We are seeking an experienced Cybersecurity Architect to advise the CISO, assess current network security architecture, define target-state designs, and guide secure, scalable implementation across IT and OT environments.This role requires deep expertise in network security, cloud and perimeter technologies, segmentation, and practical architecture patterns that enterprise teams can implement and operate.Architecture Assessment and Strategy:Assess IT and OT network security architectures and identify risks, gaps, and improvement opportunities.Partner with business, infrastructure, cloud, and networking teams to define requirements and priorities.Develop and maintain a risk-based network security roadmap aligned to business and cybersecurity strategy.Network Governance & Design:Establish network security standards, reference architectures, and approved design patterns.Design secure on-premises, cloud, and hybrid network architectures.Define segmentation, Zero Trust, remote access, DNS, perimeter, and cloud networking patterns.Review network designs to ensure alignment with security standards and target-state architecture.Implementation Oversight:Guide implementation of approved network security architectures across projects.Support migration from current-state to target-state architectures.Provide technical leadership to engineers, project teams, and architects.Serve as a liaison between security leadership, architecture, infrastructure, cloud, networking, and business teams.Qualifications:Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or equivalent experience.5+ years of cybersecurity experience, including significant network security architecture experience.Strong knowledge of security frameworks, architecture methodologies, LAN/WAN/WLAN/SD-WAN, segmentation, Zero Trust, cloud networking, IAM, perimeter security, and secure remote access.Experience developing assessments, gap analyses, roadmaps, firewall designs, and network security controls.CISSP, CCSP, CISM, TOGAF, SABSA, Cisco, or Fortinet.Cisco Secure Client / Cisco Secure AccessFortinet platforms and perimeter firewallsAWS networking and security controlsNetwork segmentation, Zero Trust, and OT/ICS architectureOT environments and AI experienceAdditional InformationOur job titles may span more than one career level. The salary rate for this role is currently $104800-149300 The actual salary offered to a candidate may be influenced by a variety of factors, such as: training, transferable skills, work experience, education, business needs, market demands and work location. More information on offered benefits, which include health, welfare, and retirement, are available at mywabtecbenefits.Other benefit offerings for this role may include annual bonus, if eligible.If you’re ready to revolutionize how the world moves for future generations, Wabtec is the place for you.Wabtec is a leading global provider of equipment, systems, digital solutions, and value-added services for the freight and transit rail sectors. Whether it’s freight, transit, ports, logistics, mining, industrial, or marine, our expertise, technologies, and people together - are accelerating the future of transportation. With roots that date back to George Westinghouse, Thomas Edison, and Louis Faiveley, Wabtec has always built technologies and implemented solutions for a variety of sectors that are critical to meeting the needs of customers and governments alike.Our global team of about 30,000 employees worldwide delivers performance that moves the world forward. We’re building a culture where leadership, inclusion and your unique perspective fuel progress.

We welcome talent of all backgrounds, experiences, and identities, including race, gender, age, disability, veteran status and more.