Enterprise Management Architect

****Must be a US Citizen or Green Card Holder****

Some knowledge / experience in Utilities / SCADA is helpful

Position Summary Description

Directly accountable for designing and governing the enterprise and utility-specific network architecture to ensure alignment with business goals, technology strategies, and security requirements.

Provide strategically focused direction, technical leadership, and architectural oversight for all network-related initiatives, including LAN/WAN, cloud networking, network security, and emerging technologies.

Ensure all network security controls are implemented and managed in accordance with appropriate security principles, industry best practices, and applicable industry standards, including NERC CIP, ISA/IEC 62443, and NIST SP 800-82 regulatory compliance standards.

Partner and collaborate with infrastructure, operational technology (OT), cybersecurity, compliance, and other teams to effectuate scalable, secure, and resilient network architectures that support business and operational objectives and requirements.

May serve as a project manager on network infrastructure projects and cross-train peers and other department team members, supporting knowledge sharing and development.

Qualifications And Education Requirements

Bachelor’s degree in Computer Science, Computer Engineering, Network Engineering, Telecommunications, or related discipline is required.

Minimum of fifteen (15) years of progressive technical leadership experience in information technology space, with at least ten (10) years in network architecture or advanced network design roles in medium to large-scale environments and at least three (3) years of experience designing networks for both Information Technology (IT) and Operational Technology (OT) environments.

Certification as a Cisco Certified Internetwork Expert (CCIE), Certified Information Systems Security Professional (CISSP), AWS Certified Advanced Networking – Specialty, or Certified Information Security Manager (CISM) is required.

Familiarity with architecture frameworks such as The Open Group Architecture Framework (TOGAF), and design methodologies like Zero Trust Architecture, defense-in-depth, and secure by design are a plus.

Core Technical Skills & Industry Keywords

• NERC CIP Compliance & OT Security Regulatory Frameworks
• SCADA (Supervisory Control and Data Acquisition) and ICS (Industrial Control Systems) Network Architecture
• ISA/IEC 62443 (Cybersecurity for Industrial Automation and Control Systems)
• NIST SP 800-82 (Guide to Industrial Control Systems Security)
• Zero Trust Architecture (ZTA), Software-Defined Perimeter (SDP), and Identity-Aware Proxy (IAP)
• IT/OT Convergence, OT Network Segmentation, and Cross-Zone Communication Controls
• Cloud Networking (AWS, Azure, GCP), Hybrid Cloud Interconnectivity, and Cloud Security Posture Management (CSPM)
• SD-WAN, MPLS, 5G/Cellular Networking, Wi-Fi 6/6E/7, and Wireless Industrial Protocols (e.g., Zigbee, LoRaWAN)
• Routing & Switching: BGP, OSPF, EIGRP, IS-IS, VLANs, VRFs, MPLS Label Switching
• Network Security Tools: Firewalls (Palo Alto, Fortinet), IDS/IPS, SIEM (e.g., Splunk, QRadar), EDR/XDR
• Network Virtualization (NSX, NVS), SDN (OpenFlow, OpenDaylight), and Network Function Virtualization (NFV)
• IPv4/IPv6 Addressing, Subnetting, CIDR, Multicast, and Network Address Translation (NAT)
• Industrial Protocols: Modbus, DNP3, Profinet, OPC UA, IEC 61850
• Network Monitoring & Telemetry: NetFlow, sFlow, IPFIX, gRPC, gNMI, Prometheus, Grafana
• Disaster Recovery, Business Continuity Planning (BCP), and Redundant Network Topologies
• Threat Intelligence Integration, MITRE ATT&CK Framework, and Adversarial Modeling

Essential Functions

Architect and drive the implementation of complex networks infrastructures, in collaboration with engineering, operations, compliance, and other business technology teams, to ensure network designs align with security policies and frameworks.

Networks include, but are not limited to LAN, WAN, data center, cloud, and wireless networks that provide high availability, scalability, and security in both information technology (IT) and operation technology (OT) environments.

Develop and maintain comprehensive enterprise network architecture roadmap, including blueprints/drawings, security policies and frameworks, hardware, software, and security that span on-premises, cloud, and hybrid environments.

Drive the development and implementation of network security policies and framework, and enforce robust network security measures, including firewalls, VPNs, intrusion detection/prevention systems, and network segmentation.

Lead and direct the implementation of network architecture initiatives, solutions, and proof-of-concept projects while collaborating with multi-disciplinary teams, affiliates, and partners to support existing and future solutions.

Maintain compliance with corporate network infrastructure policies and procedures, and remain knowledgeable of new technologies, threats, regulations, standards, and best practices applicable to IT and OT environments.

Develop and maintain detailed network documentation, including diagrams, configuration standards, and ensure all network solutions adhere to defined corporate policies and governance models.

Leads governance processes to ensure network designs meet enterprise architecture standards.

Identify and recommend improvements in processes, procedures, technologies, network expansion, hardware, software and other network improvements and innovations.

Support the establishment and implementation of network testing benchmarks, cybersecurity internal controls, and monitoring strategies.

Serves as an escalation point for complex technical problems, participates in on-call rotations to resolve emergent network issues in critical environments, and develop and conduct training programs.

Provide architectural oversight during vendor evaluations and technology selection.

Oversee network-related risk assessments and lead implementation of mitigation strategies.

Contribute to disaster recovery and business continuity planning from a network design perspective.

Perform other duties as applicable to the position or as assigned.

Performs NERC Compliance Program roles.

Soft Competencies/Skills

Strong analytical and problem-solving abilities

Effective written and verbal communication

Strategic thinking and innovation

Strong project planning, coordination, and collaboration skills

Stakeholder engagement and influencing skill

Ability to mentor junior cybersecurity analysts and OT network engineers

Leadership in cross-functional teams and matrixed environments

Adaptability to evolving regulatory landscapes and emerging threat vectors

[Add information regarding benefits and perks here]

Skills: cloud,network design,security,design,architecture