Network Security Governance & Architecture Engineer

Eaton Corporation•Coraopolis, PA

4d•$146,000 - $215,000•Hybrid

About The Position

Eaton’s Corporate Sector is hiring a Network Security Governance & Architecture Engineer based at its facility in Beachwood, Ohio. The role has a hybrid work setup, with three days in the office and two days remote each week. The expected annual salary range is $146,000–$215,000, and the role is eligible for a variable incentive program. No relocation benefit is offered, and candidates generally must live within 50 miles of the work location; active-duty military candidates are exempt from that geographic limitation. The engineer is Eaton’s Cybersecurity authority for network security architecture, standards, and compliance. The role establishes compliance- and risk-based security strategy, architecture guardrails, control requirements, reference designs, and assurance for enterprise networks, including SASE/SSE, SD-WAN, cloud and multi-cloud networking, ZTNA, private wireless/5G, edge, and OT/IoT connectivity. It translates threat intelligence, regulatory obligations, and Zero Trust principles into enforceable requirements and measurable assurance, and governs adoption through architecture reviews, exception management, and risk reporting rather than day-to-day control operations. Cybersecurity retains accountability for security requirements, architecture guardrails, control intent, compliance interpretation, assurance, and risk oversight. Infrastructure and Network Engineering are responsible for design implementation, configuration, maintenance, and run-state operations. Security Operations is responsible for detection engineering, tuning, and 24x7 monitoring. This role sets requirements and verifies outcomes; it does not operate the controls.

Requirements

Bachelor’s degree from an accredited institution.
At least 10 years of experience in information security, network engineering, or security architecture.
At least 4 years of experience setting security standards, architecture requirements, or governance for enterprise networks.
Working knowledge of adversary behavior and frameworks such as MITRE ATT&CK, incident response, and threat-hunting practices.
Ability to author enterprise security standards, reference architectures, control requirements, test procedures, and risk-based recommendations that withstand audit scrutiny.
Working knowledge of network-related security and regulatory frameworks, including NIST CSF, NIST SP 800-53, NIST SP 800-207, ISO 27001, CIS Controls, and PCI DSS, and experience producing compliance evidence.
Experience influencing architecture and design decisions through governance forums such as architecture review boards, exception committees, and risk committees.
Excellent written and verbal communication skills, including the ability to explain technical risks and requirements to engineering, operations, and business stakeholders.
Deep working knowledge of enterprise and modern network architectures, including routing and switching, firewalls, proxies, VPN, DNS, NAC, segmentation, secure remote access, SASE/SSE, SD-WAN, ZTNA, and cloud/hybrid network services.
Experience defining telemetry, detection, and logging requirements and interpreting network security data from SIEM, NDR, packet analysis, or comparable platforms.
Applicants must not require employment immigration sponsorship or support for this position, including CPT, OPT, STEM OPT, F-1 to H-1B, H-1B cap registration, O-1, E-3, TN status, or I-485 job portability.
Candidates must generally be within a 50-mile radius of the work location; active-duty military service member candidates are exempt from this geographic limitation.

Nice To Haves

Master’s degree in Cybersecurity, Information Assurance, or Computer Science from an accredited institution.
Professional certifications such as CISSP (ISSAP preferred), CCSP, CISM, SABSA, TOGAF, GIAC GCIA/GCIH/GDSA, or vendor credentials from Cisco, Zscaler, Palo Alto Networks, or Check Point.
Experience designing or validating Zero Trust network architectures, microsegmentation, software-defined perimeter, or zero-trust network access controls.
Experience defining security requirements for emerging architectures such as SASE/SSE migrations, SD-WAN, private 5G/enterprise wireless, cloud-native and multi-cloud networking, service mesh, edge/satellite connectivity, IPv6, and network-as-code pipelines.
Familiarity with regulatory drivers relevant to a global manufacturer, including EU NIS2, the EU Cyber Resilience Act, IEC 62443, SEC cyber-disclosure rules, CMMC, and data-sovereignty/cross-border data-flow requirements.
Proficiency with platforms and tools such as Zscaler, Check Point, Microsoft Sentinel or Defender, CrowdStrike, network detection and response tools, packet-capture utilities, and firewall policy-management solutions.

Responsibilities

Own network security standards, guardrails, and reference architectures for segmentation, secure connectivity, remote access, network access control, firewall and policy management, DNS security, web/proxy controls, encrypted-traffic visibility, and privileged network access; maintain a standards portfolio with ownership, review cadence, deviation criteria, and an exception process.
Assess adversary tactics, techniques, and procedures affecting enterprise, cloud, remote-access, product-connected, and industrial network paths, and translate them into prioritized standards changes, control requirements, and detection intent.
Specify required network telemetry, logging standards, and detection use cases across SIEM, NDR, firewall, proxy, DNS, VPN, and SASE/SSE platforms; validate coverage for priority attack paths and partner with Security Operations to address gaps and correlate network signals with identity, endpoint, and cloud events.
Set threat-hunting priorities and hypotheses based on MITRE ATT&CK, Eaton’s threat profile, and architectural weaknesses; sponsor and review hunts with Security Operations and turn findings into tracked standards, control, and telemetry improvements.
Own the multi-year Zero Trust target-state model for trust boundaries, microsegmentation, least-privilege connectivity, and containment across IT, cloud, OT, and product-connected networks; define maturity milestones, sequencing, and adoption criteria, and align designs with Infrastructure and Enterprise Architecture.
Establish a risk-based network control assurance program, including control-testing scope, evidence standards, configuration and exposure-path review, exception governance and aging, and remediation prioritization based on exploitability and business impact; report results to governance forums with accountable owners.
Provide timely network analysis and reusable improvements to incident-response teams through investigations and exercises.
Ensure new network technologies and architectures have approved security requirements, documented risk decisions, and guardrails before deployment.
Track adoption of network security standards, telemetry and detection coverage, remediation, exceptions, compliance evidence, and year-over-year Zero Trust and segmentation maturity progress.