Enterprise Architect - Infrastructure and Cyber Security

Location: Berwyn

The Enterprise Architect – Infrastructure & Cyber Security is the senior-most architect responsible for setting and governing target-state architecture across infrastructure, network, cloud, and security domains for a global, multi-business manufacturing company. This role defines resilient, secure, and compliant technical architecture for both commercial and regulated environments.

Reporting to the Corporate Director of IT Architecture, Operations and CISO. this role partners with the Enterprise Architect - Applications, and other functional peers to deliver reliable, scalable, and cost-efficient infrastructure and security platforms aligned to business strategy. As the senior architect within the Infrastructure, Operations, Architecture & Cyber Defense organization, this role sets the target-state architecture that the infrastructure, network, identity, and security operations teams implement, and partners with Governance, Risk & Compliance on control and compliance architecture.

Responsibilities:

Own the enterprise architecture (EA) strategy, reference architectures, and roadmaps across infrastructure, network, cloud, workplace, and security domains.

Establish and run the Architecture Steering Committee/Review Board, patterns/standards, and technology lifecycle governance for infrastructure and security.

Embed reference architectures and standards into technology transitions and into strategic service providers’ operations, so that security and resilience are designed in as delivery shifts toward the outsourced operating model.

Define multi-cloud strategy (Azure/AWS), hybrid patterns, landing zones, network segmentation, SASE/SD-WAN, and edge architectures.

Architect OT/IT convergence patterns for plant network segmentation, IIoT, and edge computing, partnering with application and operations architecture as needed.

Evaluate emerging technologies — including AI and generative-AI adoption and their security-architecture implications — in coordination with the Data, Analytics & AI function and enterprise AI governance.

Embed Zero Trust, identity, secrets management, PAM, and secure-by-design principles across the environment, in partnership with the Director, Cyber Engineering and Operations.

Define enterprise logging, telemetry, and observability architecture, including SIEM and detection data sources, in partnership with the Director, Cyber Engineering and Operations.

Ensure architectures meet SOX, NIST 800-171/CMMC, DFARS , ITAR/EAR, ISO 27001, and customer contract requirements; segment and protect Controlled Unclassified Information (CUI) as required.

Define enterprise identity and access architecture (SSO/MFA, PAM, IGA) in partnership with IAM engineering.

Architect data center, compute, storage, and disaster recovery/business continuity strategy.

Lead technology due diligence for M&A from an infrastructure and security perspective; define integration blueprints and post-close modernization plans.

Rationalize infrastructure and security tooling; manage vendor strategy and total cost of ownership for infrastructure and security platforms.

Translate strategy into executable roadmaps with milestones, budgets, and KPIs.Mentor a team of infrastructure- and security-focused domain architects; build an EA community of practice.

Partner with Finance on infrastructure cost optimization (cloud Fin Ops, license optimization).

Qualifications:

BS in Computer Science/Engineering or related; MS/MBA preferred.
10+ years in architecture/engineering with 5+ years leading infrastructure or security architecture in complex, global organizations; proven delivery at scale across cloud and network domains.

Deep expertise in Azure/AWS architecture, landing zones, and infrastructure as code.

Network segmentation,…