Enterprise Architect - Infrastructure and Cyber Security

AMETEK; Berwyn (PA); On-site; USD 140,000 - 180,000; Full time

Job summary

AMETEK, Inc. seeks a senior Enterprise Architect for Infrastructure & Cyber Security to govern target-state architecture across on-prem, cloud, and security domains for a global manufacturing leader.

You will drive governance, multi-cloud strategy, and secure-by-design principles, partnering with cross-functional peers to ensure compliant, resilient platforms. Senior leadership role focused on architecture roadmaps, OT/IT convergence, and cost-efficient operations.

Qualifications

• BS in Computer Science/Engineering or related; MS/MBA preferred.
• 10+ years in architecture/engineering with 5+ years leading infra or security architecture.
• Expertise in Azure/AWS and landing zones; IaC experience required.
• Zero Trust, IAM, SSO/MFA, PAM, EDR/XDR, and logging/observability.
• Familiar with SOX ITGCs and regulated customer requirements.

Responsibilities

• Own the enterprise architecture strategy and roadmaps across infra, network, cloud, and security.
• Lead Architecture Steering Committee and governance for infra and security.
• Embed reference architectures into transitions and vendor operations.
• Define multi-cloud strategy (Azure/AWS) and edge architectures.
• Contribute to OT/IT convergence and plant network segmentation initiatives.
• Assess AI adoption and security-architecture implications with governance.
• Embed Zero Trust, IAM, and secure-by-design principles across the environment.
• Define logging, telemetry, and observability architecture with SIEM inputs.
• Ensure compliance with SOX, NIST, DFARS, ITAR/EAR; protect CUI as required.
• Lead due diligence for M&A from an infrastructure/security perspective.

Skills

Executive presence

Storytelling

Influence across teams

AI use cases

Cloud architecture

SOX ITGCs

Vendor negotiation

Education

BS in Computer Science/Engineering

MS/MBA preferred

Tools

Azure

AWS

Infrastructure as Code

Terraform

Job description

The Enterprise Architect – Infrastructure & Cyber Security is the senior-most architect responsible for setting and governing target-state architecture across infrastructure, network, cloud, and security domains for a global, multi-business manufacturing company. This role defines resilient, secure, and compliant technical architecture for both commercial and regulated environments.

This role partners with the Enterprise Architect – Applications, and other functional peers to deliver reliable, scalable, and cost-efficient infrastructure and security platforms aligned to business strategy. As the senior architect within the Infrastructure, Operations, Architecture & Cyber Defense organization, this role sets the target-state architecture that the infrastructure, network, identity, and security operations teams implement, and partners with Governance, Risk & Compliance on control and compliance architecture.

Responsibilities

• Own the enterprise architecture (EA) strategy, reference architectures, and roadmaps across infrastructure, network, cloud, workplace, and security domains.
• Establish and run the Architecture Steering Committee/Review Board, patterns/standards, and technology lifecycle governance for infrastructure and security.
• Embed reference architectures and standards into technology transitions and into strategic service providers’ operations, so that security and resilience are designed in as delivery shifts toward the outsourced operating model.
• Define multi-cloud strategy (Azure/AWS), hybrid patterns, landing zones, network segmentation, SASE/SD-WAN, and edge architectures.
• Architect OT/IT convergence patterns for plant network segmentation, IIoT, and edge computing, partnering with application and operations architecture as needed.
• Evaluate emerging technologies — including AI and generative-AI adoption and their security-architecture implications — in coordination with the Data, Analytics & AI function and enterprise AI governance.
• Embed Zero Trust, identity, secrets management, PAM, and secure-by-design principles across the environment, in partnership with the Director, Cyber Engineering and Operations.
• Define enterprise logging, telemetry, and observability architecture, including SIEM and detection data sources, in partnership with the Director, Cyber Engineering and Operations.
• Ensure architectures meet SOX, NIST 800-171/CMMC, DFARS 252.204-7012, ITAR/EAR, ISO 27001, and customer contract requirements; segment and protect Controlled Unclassified Information (CUI) as required.
• Define enterprise identity and access architecture (SSO/MFA, PAM, IGA) in partnership with IAM engineering.
• Architect data center, compute, storage, and disaster recovery/business continuity strategy.
• Lead technology due diligence for M&A from an infrastructure and security perspective; define integration blueprints and post-close modernization plans.
• Rationalize infrastructure and security tooling; manage vendor strategy and total cost of ownership for infrastructure and security platforms.
• Translate strategy into executable roadmaps with milestones, budgets, and KPIs.
• Mentor a team of infrastructure- and security-focused domain architects; build an EA community of practice.
• Partner with Finance on infrastructure cost optimization (cloud FinOps, license optimization).

Qualifications

• BS in Computer Science/Engineering or related; MS/MBA preferred.
• 10+ years in architecture/engineering with 5+ years leading infrastructure or security architecture in complex, global organizations; proven delivery at scale across cloud and network domains.
• Deep expertise in Azure/AWS architecture, landing zones, and infrastructure as code.
• Network segmentation, SASE/SD-WAN, and edge architecture experience.
• Zero Trust, IAM, SSO/MFA, PAM, EDR/XDR, data protection, and logging/observability.
• OT/IT convergence and plant network segmentation experience a plus.
• Demonstrated experience with SOX ITGCs and regulated customer requirements (NIST 800-171/CMMC, DFARS, ITAR/EAR); contract flow-down comprehension.
• Executive presence, clear storytelling, ability to influence across engineering, operations, security, and finance; vendor and SOW negotiation.
• TOGAF or equivalent EA certification; Azure/AWS architect certification; CISSP/SABSA preferred.
• Eligibility to work with export-controlled information; ability to obtain/maintain relevant clearances when required by customer programs.
• Willingness to visit manufacturing sites and suppliers globally.
• Experience in decentralized, acquisitive, multi-business manufacturing environments; able to standardize architecture while respecting business-unit autonomy.
• Familiarity with multi-provider / service-integration (SIAM) operating models in which Corporate IT owns architecture and strategic providers execute operations.
• Demonstrated ability and willingness to use AI tools to improve productivity, decision-making, work quality, and to reduce costs. The successful candidate must be able to identify appropriate AI use cases and critically evaluate AI-generated outputs.

Compensation

Employee Type: Salaried

Currency: USD

Salary Minimum: 140,000

Salary Maximum: 180,000

Incentive: Yes

Disclaimer: Where a specific pay range is noted, it is a good faith estimate at the time of this posting. The actual salary offered will be based on experience, skills, qualifications, market / business considerations, and geographic location.

AMETEK, Inc. is a leading global provider of industrial technology solutions serving a diverse set of attractive niche markets with annual sales over $7.5 billion.

AMETEK is committed to making a safer, sustainable, and more productive world a reality. We use differentiated technology solutions to solve our customers’ most complex challenges. We employ 22,000 colleagues, in 35 countries, that are grounded by our core values: Ethics and Integrity, Respect for the Individual, Inclusion, Teamwork, and Social Responsibility. AMETEK is a component of the S&P 500. Visit https://www.ametek.com/careers for more information.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, and basis of disability or any other federal, state or local protected class. Individuals who need a reasonable accommodation because of a disability for any part of the employment process should call 1 [phone].