Network Security Governance & Architecture Engineer

Eaton’s Corporate Sector division is currently seeking a Network Security Governance & Architecture Engineer. The position will be based at our facility in Beachwood, Ohio. The role is eligible for a hybrid work setup (3 days in office, 2 days remote each week).

The expected annual salary range for this role is $146000 - $215000 a year. This position is also eligible for a variable incentive program.

Please note the salary information shown above is a general guideline only. Salaries are based upon candidate skills, experience, and qualifications, as well as market and business considerations.

• Own network security standards, guardrails and reference architectures:
  Define requirements, approved patterns and target-state reference designs for segmentation, secure connectivity, remote access, network access control, firewall and policy management, DNS security, web/proxy controls, encrypted-traffic visibility and privileged network access. Maintain a published standards portfolio with clear ownership, review cadence, deviation criteria and a documented exception process.
• Translate threat intelligence into control strategy:
  Assess adversary tactics, techniques and procedures affecting enterprise, cloud, remote-access, product-connected and industrial network paths, and convert them into prioritized standard changes, control requirements and detection intent. Focus on the strategic requirements rather than the tuning of individual rules.
• Define detection requirements and validate coverage:
  Specify the network telemetry, logging standards and detection use cases required across SIEM, NDR, firewall, proxy, DNS, VPN and SASE/SSE platforms, and validate that coverage exists for priority attack paths. Partner with Security Operations - who builds and tunes the detection content - to close telemetry and coverage gaps and to correlate network signal with identity, endpoint and cloud events.
• Direct risk-informed threat hunting:
  Set hunt priorities and hypotheses based on MITRE ATT&CK, Eaton's threat profile and known architectural weaknesses; sponsor and review hunts executed with Security Operations; and convert findings into standards, control and telemetry improvements with tracked owners.
• Advance Zero Trust and segmentation strategy:
  Own the multi-year target-state model for trust boundaries, microsegmentation, least-privilege connectivity and containment across IT, cloud, OT and product-connected networks. Define maturity milestones, sequencing and adoption criteria, and partner with Infrastructure and Enterprise Architecture to align secure designs with operational and business requirements.
• Run the network control assurance program:
  Establish a repeatable, risk-based program to verify that required network controls are implemented and effective - including control testing scope, evidence standards, configuration and exposure-path review, exception governance and aging, and remediation prioritization based on exploitability and business impact. Report results into governance forums with accountable owners.

Basic Qualifications:

• Bachelor’s degree from an accredited institution
• Minimum 10+ years of experience in information security, network engineering or security architecture
• Minimum 4 years’ experience in setting security standards, architecture requirements or governance for enterprise networks.
• Eaton will not consider applicants for employment immigration sponsorship or support for this position. This means that Eaton will not support any CPT, OPT, or STEM OPT plans, F-1 to H-1B, H-1B cap registration, O-1, E-3, TN status, I-485 job portability, etc.
• No relocation benefit is being offered for this position. Only candidates within a 50-mile radius of the work location…