Cybersecurity Architect

Job Description Summary

This position will work on highly complex projects that require in-depth domain knowledge in two or more specialized areas. They are responsible for driving the design and implementation efforts related to architecture, scalability, availability and performance alignment w/ the product roadmap with a focus on application development & automation. They may interact w/ functional leaders to support these technical initiatives.

Job Description

Roles and Responsibilities

Architecture & Roadmap Development

 Participate in domain technical and business discussions related to future

architecture direction for ICS/OT environments.

 Assist in the analysis, design, and development of secure infrastructure roadmaps,

ensuring alignment between current and future state architectures.

 Gather and analyze data to define architectural requirements at the project level.

 Enforce the ICS/OT security architecture governance model and ensure adherence

to standards across project delivery.

 Design and deploy secure ICS and IT/OT infrastructure solutions, ensuring

compliance with IEC 62443, NERC CIP, and ISO27001/27002 standards.

 Research and evaluate emerging ICS/OT cybersecurity technologies and threat

intelligence to enhance project outcomes.

 Coach and mentor project teams and customer stakeholders on ICS cybersecurity

best practices.

Cybersecurity in Project Implementation

 Act as a technical authority in the design and deployment of project infrastructure

supporting ICS/OT systems (network segmentation, secure remote access,

virtualization, backups, monitoring).

 Integrate and configure ICS/OT security tools (firewalls, intrusion detection, asset

inventory, anomaly detection) into customer environments.

 Conduct vulnerability assessments, compliance checks, and security hardening

activities within the scope of project delivery.

 Ensure all project activities are carried out in compliance with ICS-relevant

standards (ISO9001, ISO27001, IEC 62443) and company processes.

 Translate business and operational requirements into secure technical solutions

that strengthen cyber resilience for customer environments.

Required Qualifications

 Bachelor’s Degree with significant professional experience.

 Proven experience in ICS/OT cybersecurity engineering and implementation

projects.

 Familiarity with applying ICS security frameworks (IEC 62443, NIST CSF, NERC CIP)

in projects.

 System administration: Windows - core competency to install, configure, manage.

 Linux administration and security expertise.

 Network hardware: Cisco enterprise and industrial switches, VLAN, ACL, routing,

VPN, and network segmentation for ICS environments.

 Security management: Enterprise firewalls (Cisco ASA, Fortinet, Palo Alto, or

equivalent) - design, configure, deploy, with emphasis on OT perimeter defense and

secure remote access.

 Windows / Active Directory Services - install, configure, manage.

 Virtualization: VMware vSphere clusters, with experience in HA, DRS, and backup

APIs.

 Storage: Shared NAS/SAN network storage (HP 3PAR/MSA/EVA, EMC DataDomain).

 Backup Technologies (NetBackup, BackupExec, Veeam, Networker).

 Knowledge of anti-virus implementations (McAfee EPO, Bitdefender, Microsoft

Forefront, etc.).

 Experience with IPAMs and password management solutions.

 Experience with monitoring, logging, and SIEM tools (Nagios, Graylog, Splunk,

Claroty, Nozomi, Dragos).

 Strong cybersecurity foundation with demonstrated OT project delivery experience.

Desired Characteristics

 Experience in support/incident management (L1/L2/L3) for ICS/OT security tools,

incident response, and vulnerability remediation.

 Willingness to travel abroad for on-site project delivery (up to 50% of the time or

more).

 Fluent in English.

 Degree or Diploma in Computer Science or equivalent knowledge or experience.

 Proven track record of problem analysis, identification, and resolution.

 Excellent communication skills, discipline, accountability, and flexibility in a

project-driven environment.

 Strong understanding of ITIL and change management policies and procedures.

 Hands-on experience in technical roles within critical infrastructure or industrial

environments.

 Understanding of architecture standards concepts and ability to apply them to

project work .

Why join our team:

GE Vernova is proud to be an equal opportunity employer, committed to the continuous improvement and the wellbeing of its employee. We are offering fully customized development and training programs all throughout the year, on top of a LinkedIn Learning subscription and full access to GE Vernova’s learning database.

Our wellbeing program will allow you to benefit from multiple events focused on a healthy lifestyle, free apps to support your healthy habits and free employee assistance program, provided by specialized counselors.

Also, we are offering:

Strong induction process (a dedicated 1-month ramp-up period).

Flexible working hours and a well-defined hybrid working policy.

Private Medical Insurance for you (can also be extended for family members).

Attractive financial compensations for roles involving external travels and on-site missions.

Fully customized development and training programs all throughout the year.

Increased number of vacation days, according to your work-experience, encompassed by an annual bonus payout.

Annual, performance-based, salary review.

Multiple subscriptions, discounts and vouchers available (such as Bookster subscription, corporate discount to fitness services, gift vouchers for Christmas and Easter holiday, daily meal vouchers, additional days off such as 8th of March and 3rd Easter Day and children’s benefits, including gifts for special occasions, vouchers, and events) etc.

Our Culture

At GE Vernova, we believe in the value of your unique identity, background, and experiences. We are committed to fostering an inclusive culture, where everyone feels empowered to do their best work because they feel accepted, respected, and that they belong. By embracing inclusive teams and perspectives, we are better equipped to build a world that works.

GE Vernova’s Global Delivery Center in Bucharest is not only a workplace, but also a community where members are actively involved in different initiatives such as personal development workshops, book clubs, sports competitions, charity events, volunteering on greening and afforestation and dedicated events for employees’ children.

Additional Information

Relocation Assistance Provided: No