Security Architect

Security Architect – Rail Infrastructure Description

Apital is hiring a visionary and technically experienced Security Architect to guide secure infrastructure development for large-scale CBTC and PTC rollouts in various transit environments. The architect will collaborate with OT, IT, and engineering teams to integrate resilient cybersecurity into all aspects of the rail communication environment.

The Security Architect leads the design and integration of cybersecurity across the rail transit environment, including operational, administrative, and public-facing systems.

• Design security frameworks for hybrid OT/IT systems used in public rail transit.
• Design security architecture for CBTC zones, PTC deployments, Automatic Train Supervision (ATS) systems and other rail application systems.
• Define network segmentation strategies to isolate train communications from enterprise IT networks.
• Evaluate cybersecurity posture of train radio systems, wireless access points, and VPNs used in control signaling.
• Oversee risk modeling and threat assessments for train control technologies and their supply chains.
• Conduct risk assessments of existing infrastructure.
• Develop long-term strategies for securing signaling, rolling stock, and command centers.
• Coordinate security architecture with federal and local compliance mandates.

• Strong background in critical infrastructure cybersecurity.
• Experience layered security in control systems and enterprise IT.
• Ability to assess and mitigate cyber risks in passenger-facing technology.

• Certifications:
  
  CISSP-ISSAP, SABSA, TOGAF, or CCSK.
• Experience designing layered defenses in hybrid IT/OT environments.

401K, 401 matching, disability insurance, employee assistance program, flexible spending account, health insurance.