Staff Cybersecurity Architect

Wabtec; Pittsburgh (Allegheny County); On-site; USD 105,000 - 149,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Annual bonus

Job summary

Wabtec is seeking an experienced Cybersecurity Architect to advise the CISO, assess current network security architecture, define target-state designs, and guide secure, scalable implementation across IT and OT environments.

You will lead architecture assessments, design secure on-premises, cloud, and hybrid networks, and champion security-by-design while collaborating with cross-functional teams to reduce risk and enable safe digital transformation.

Qualifications

• Bachelor's or Master's degree in cybersecurity, CS, information systems, engineering, or equivalent experience.
• 5+ years of cybersecurity experience, including network security architecture.
• Strong knowledge of security frameworks, LAN/WAN/WLAN/SD-WAN, segmentation, Zero Trust, cloud networking, IAM, perimeter security, and remote access.
• Experience developing assessments, gap analyses, roadmaps, firewall designs, and network security controls.
• Excellent communication, leadership, stakeholder management, and execution skills.
• Preferred certifications: CISSP, CCSP, CISM, TOGAF, SABSA, Cisco, or Fortinet.

Responsibilities

• Assess IT and OT network security architectures and identify risks, gaps, and improvement opportunities.
• Partner with business, infrastructure, cloud, and networking teams to define requirements and priorities.
• Develop and maintain a risk-based network security roadmap aligned to business and cybersecurity strategy.
• Establish network security standards, reference architectures, and approved design patterns.
• Design secure on-premises, cloud, and hybrid network architectures.
• Define segmentation, Zero Trust, remote access, DNS, perimeter, and cloud networking patterns.
• Review network designs to ensure alignment with security standards and target-state architecture.
• Guide implementation of approved network security architectures across projects.
• Validate that security controls are implemented and operating effectively.
• Support migration from current-state to target-state architectures.
• Provide technical leadership to engineers, project teams, and architects.
• Serve as a liaison between security leadership, architecture, infrastructure, cloud, networking, and business teams.
• Present assessments, recommendations, and roadmaps to leadership.
• Promote security-by-design and drive recommendations through adoption.

Skills

Network security architecture

Zero Trust

Cloud networking

Segmentation

Risk assessment

Perimeter security

IAM

Education

Bachelor's or Master's degree

Tools

Fortinet firewalls

AWS networking

OT/ICS architecture

Job description

We are seeking an experienced Cybersecurity Architect to advise the CISO, assess current network security architecture, define target-state designs, and guide secure, scalable implementation across IT and OT environments.

This role requires deep expertise in network security, cloud and perimeter technologies, segmentation, and practical architecture patterns that enterprise teams can implement and operate.

Key Responsibilities:

Architecture Assessment and Strategy:

• Assess IT and OT network security architectures and identify risks, gaps, and improvement opportunities.
• Partner with business, infrastructure, cloud, and networking teams to define requirements and priorities.
• Develop and maintain a risk-based network security roadmap aligned to business and cybersecurity strategy.

Network Governance & Design:

• Establish network security standards, reference architectures, and approved design patterns.
• Design secure on-premises, cloud, and hybrid network architectures.
• Define segmentation, Zero Trust, remote access, DNS, perimeter, and cloud networking patterns.
• Review network designs to ensure alignment with security standards and target-state architecture.

Implementation Oversight:

• Guide implementation of approved network security architectures across projects.
• Validate that security controls are implemented and operating effectively.
• Support migration from current-state to target-state architectures.
• Provide technical leadership to engineers, project teams, and architects.
• Serve as a liaison between security leadership, architecture, infrastructure, cloud, networking, and business teams.
• Present assessments, recommendations, and roadmaps to leadership.
• Promote security-by-design and drive recommendations through adoption.

Qualifications:

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or equivalent experience.
• 5+ years of cybersecurity experience, including significant network security architecture experience.
• Strong knowledge of security frameworks, architecture methodologies, LAN/WAN/WLAN/SD-WAN, segmentation, Zero Trust, cloud networking, IAM, perimeter security, and secure remote access.
• Experience developing assessments, gap analyses, roadmaps, firewall designs, and network security controls.
• Excellent communication, leadership, stakeholder management, and execution skills.
• Preferred certifications: CISSP, CCSP, CISM, TOGAF, SABSA, Cisco, or Fortinet.

Technical Experience Preferred:

• Fortinet platforms and perimeter firewalls
• AWS networking and security controls
• Network segmentation, Zero Trust, and OT/ICS architecture
• OT environments and AI experience

Additional Information

Our job titles may span more than one career level. The salary rate for this role is currently $104800-149300 The actual salary offered to a candidate may be influenced by a variety of factors, such as: training, transferable skills, work experience, education, business needs, market demands and work location. The base pay range is subject to change and may be modified in the future. More information on offered benefits, which include health, welfare, and retirement, are available at mywabtecbenefits.com. Other benefit offerings for this role may include annual bonus, if eligible.

What could you accomplish in a place that puts People First?

At Wabtec, it's not just about a job - it's about the impact you make. When our people come together, we're Expanding the Possible by continuously improving what we do and how we do it - for our clients and each other.

If you're ready to revolutionize how the world moves for future generations, Wabtec is the place for you.

Who are we?

Wabtec is a leading global provider of equipment, systems, digital solutions, and value-added services for the freight and transit rail sectors. Drawing on more than 150 years of experience, we are leading the way in safety, efficiency, reliability, innovation, and productivity. Whether it's freight, transit, ports, logistics, mining, industrial, or marine, our expertise, technologies, and people together – are accelerating the future of transportation. With roots that date back to George Westinghouse, Thomas Edison, and Louis Faiveley, Wabtec has always built technologies and implemented solutions for a variety of sectors that are critical to meeting the needs of customers and governments alike.

Our global team of about 30,000 employees worldwide delivers performance that moves the world forward. We're lifelong learners, obsessed with better. Learn more at www.WabtecCorp.com.

Culture powers us and the possibilities.

We believe the best ideas come from a mix of experiences and backgrounds. At Wabtec, we strive every day to create a place where everyone belongs. We're building a culture where leadership, inclusion and your unique perspective fuel progress.

We're proud to be an Equal Opportunity Employer. We welcome talent of all backgrounds, experiences, and identities, including race, gender, age, disability, veteran status and more.

Need accommodation? Just let us know - we've got you.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply