Strategic Network Security Architect (Zero Trust & Cloud)

Wabtec; Pittsburgh (Allegheny County); On-site; USD 105,000 - 149,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Annual bonus

Job summary

Wabtec is seeking an experienced Cybersecurity Architect to advise the CISO, assess current network security architecture, define target-state designs, and guide secure, scalable implementation across IT and OT environments.

You will lead architecture assessments, design secure on-premises, cloud, and hybrid networks, and champion security-by-design while collaborating with cross-functional teams to reduce risk and enable safe digital transformation.

Qualifications

• Bachelor's or Master's degree in cybersecurity, CS, information systems, engineering, or equivalent experience.
• 5+ years of cybersecurity experience, including network security architecture.
• Strong knowledge of security frameworks, LAN/WAN/WLAN/SD-WAN, segmentation, Zero Trust, cloud networking, IAM, perimeter security, and remote access.
• Experience developing assessments, gap analyses, roadmaps, firewall designs, and network security controls.
• Excellent communication, leadership, stakeholder management, and execution skills.
• Preferred certifications: CISSP, CCSP, CISM, TOGAF, SABSA, Cisco, or Fortinet.

Responsibilities

• Assess IT and OT network security architectures and identify risks, gaps, and improvement opportunities.
• Partner with business, infrastructure, cloud, and networking teams to define requirements and priorities.
• Develop and maintain a risk-based network security roadmap aligned to business and cybersecurity strategy.
• Establish network security standards, reference architectures, and approved design patterns.
• Design secure on-premises, cloud, and hybrid network architectures.
• Define segmentation, Zero Trust, remote access, DNS, perimeter, and cloud networking patterns.
• Review network designs to ensure alignment with security standards and target-state architecture.
• Guide implementation of approved network security architectures across projects.
• Validate that security controls are implemented and operating effectively.
• Support migration from current-state to target-state architectures.
• Provide technical leadership to engineers, project teams, and architects.
• Serve as a liaison between security leadership, architecture, infrastructure, cloud, networking, and business teams.
• Present assessments, recommendations, and roadmaps to leadership.
• Promote security-by-design and drive recommendations through adoption.

Skills

Network security architecture

Zero Trust

Cloud networking

Segmentation

Risk assessment

Perimeter security

IAM

Education

Bachelor's or Master's degree

Tools

Fortinet firewalls

AWS networking

OT/ICS architecture

Job description

Wabtec is seeking an experienced Cybersecurity Architect to advise the CISO, assess current network security architecture, define target-state designs, and guide secure, scalable implementation across IT and OT environments.

You will lead architecture assessments, design secure on-premises, cloud, and hybrid networks, and champion security-by-design while collaborating with cross-functional teams to reduce risk and enable safe digital transformation.