Staff Cybersecurity Architect

Wabtec•Pittsburgh, PA

13h•$104,800 - $149,300

About The Position

Wabtec is seeking an experienced Cybersecurity Architect to advise the CISO, assess current IT and OT network security architecture, define target-state designs, and guide secure, scalable implementation. The role calls for expertise in network security, cloud and perimeter technologies, segmentation, and practical architecture patterns that enterprise teams can implement and operate. The architect will establish network security standards and reference architectures, design secure on-premises, cloud, and hybrid networks, and guide implementation across projects. The role also works across security leadership, architecture, infrastructure, cloud, networking, and business teams to advance security-by-design and communicate assessments, recommendations, and roadmaps. The stated base salary range is $104,800–$149,300. The actual offer may vary based on factors including training, transferable skills, work experience, education, business needs, market demands, and work location. Benefits information is available at mywabtecbenefits.com; benefit offerings include health, welfare, and retirement, and may include an annual bonus if eligible.

Requirements

Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or equivalent experience.
At least 5 years of cybersecurity experience, including significant network security architecture experience.
Strong knowledge of security frameworks and architecture methodologies.
Knowledge of LAN/WAN/WLAN/SD-WAN, segmentation, Zero Trust, cloud networking, IAM, perimeter security, and secure remote access.
Experience developing assessments, gap analyses, roadmaps, firewall designs, and network security controls.
Excellent communication, leadership, stakeholder management, and execution skills.

Nice To Haves

CISSP, CCSP, CISM, TOGAF, SABSA, Cisco, or Fortinet certifications.
Experience with Cisco Secure Client / Cisco Secure Access.
Experience with Fortinet platforms and perimeter firewalls.
Experience with AWS networking and security controls.
Experience with network segmentation, Zero Trust, and OT/ICS architecture.
Experience with OT environments and AI.

Responsibilities

Assess IT and OT network security architectures and identify risks, gaps, and improvement opportunities.
Partner with business, infrastructure, cloud, and networking teams to define requirements and priorities.
Develop and maintain a risk-based network security roadmap aligned with business and cybersecurity strategy.
Establish network security standards, reference architectures, and approved design patterns.
Design secure on-premises, cloud, and hybrid network architectures.
Define segmentation, Zero Trust, remote access, DNS, perimeter, and cloud networking patterns.
Review network designs for alignment with security standards and target-state architecture.
Guide implementation of approved network security architectures across projects.
Validate that security controls are implemented and operating effectively.
Support migration from current-state to target-state architectures.
Provide technical leadership to engineers, project teams, and architects.
Serve as a liaison among security leadership, architecture, infrastructure, cloud, networking, and business teams.
Present assessments, recommendations, and roadmaps to leadership.
Promote security-by-design and drive recommendations through adoption.