Enterprise Management Architect Job ID: 387132

Must be a US Citizen or Green Card Holder

Some knowledge / experience in Utilities / SCADA is helpful

Directly accountable for designing and governing the enterprise and utility-specific network architecture to ensure alignment with business goals, technology strategies, and security requirements.

Provide strategically focused direction, technical leadership, and architectural oversight for all network-related initiatives, including LAN/WAN, cloud networking, network security, and emerging technologies.

Ensure all network security controls are implemented and managed in accordance with appropriate security principles, industry best practices, and applicable industry standards, including NERC CIP
, ISA/IEC 62443
, and NIST SP 800-82 regulatory compliance standards.

Partner and collaborate with infrastructure, operational technology (OT), cybersecurity, compliance, and other teams to effectuate scalable, secure, and resilient network architectures that support business and operational objectives and requirements.

May serve as a project manager on network infrastructure projects and cross-train peers and other department team members, supporting knowledge sharing and development.

Bachelor’s degree in Computer Science, Computer Engineering, Network Engineering, Telecommunications, or related discipline is required.

Minimum of fifteen (15) years of progressive technical leadership experience in information technology space, with at least ten (10) years in network architecture or advanced network design roles in medium to large-scale environments and at least three (3) years of experience designing networks for both Information Technology (IT) and Operational Technology (OT) environments.

Certification as a Cisco Certified Internetwork Expert (CCIE),
Certified Information Systems Security Professional (CISSP),
AWS Certified Advanced Networking – Specialty
, or Certified Information Security Manager (CISM) is required.

Familiarity with architecture frameworks such as The Open Group Architecture Framework (TOGAF), and design methodologies like Zero Trust Architecture
, defense-in-depth
, and secure by design are a plus.

• NERC CIP Compliance &
  OT Security Regulatory Frameworks
• SCADA (Supervisory Control and Data Acquisition) and ICS (Industrial Control Systems) Network Architecture
• ISA/IEC 62443 (Cybersecurity for Industrial Automation and Control Systems)
• NIST SP 800-82 (Guide to Industrial Control Systems Security)
• Zero Trust Architecture (ZTA),
  Software-Defined Perimeter (SDP), and Identity-Aware Proxy (IAP)
• IT/OT Convergence
  , OT Network Segmentation
  , and Cross-Zone Communication Controls
• Cloud Networking (AWS, Azure, GCP),
  Hybrid Cloud Interconnectivity
  , and Cloud Security Posture Management (CSPM)
• SD-WAN
  , MPLS
  , 5G/Cellular Networking
  , Wi-Fi 6/6E/7, and Wireless Industrial Protocols (e.g., Zigbee, LoRaWAN)
• Routing & Switching
  : BGP, OSPF, EIGRP, IS-IS, VLANs, VRFs, MPLS Label Switching
• Network Security Tools
  :
  Firewalls (Palo Alto, Fortinet), IDS/IPS, SIEM (e.g., Splunk, QRadar), EDR/XDR
• Network Virtualization (NSX, NVS),
  SDN (Open Flow, Open Daylight), and Network Function Virtualization (NFV)
• IPv4/IPv6 Addressing
  , Subnetting, CIDR, Multicast, and Network Address Translation (NAT)
• Industrial Protocols
  :
  Modbus, DNP3, Profinet, OPC UA, IEC 61850
• Network Monitoring & Telemetry
  :
  Net Flow, sFlow, IPFIX, gRPC, gNMI, Prometheus, Grafana
• Disaster Recovery
  , Business Continuity Planning (BCP), and Redundant Network Topologies
• Threat Intelligence Integration
  , MITRE ATT&CK Framework
  , and Adversarial Modeling

Architect and drive the implementation of complex networks infrastructures, in collaboration with engineering, operations, compliance, and other business technology teams, to ensure network designs align with security policies and frameworks.

Networks include, but are not limited to LAN, WAN, data center, cloud, and wireless networks that provide high availability, scalability, and security in both information technology (IT) and operation technology (OT) environments.

Develop and maintain comprehensive…