Job description

The Enterprise Architect – Infrastructure & Cyber Security is the senior-most architect responsible for setting and governing target-state architecture across infrastructure, network, cloud, and security domains for a global, multi-business manufacturing company. This role defines resilient, secure, and compliant technical architecture for both commercial and regulated environments. Reporting to the Corporate Director of IT Architecture, Operations and CISO. this role partners with the Enterprise Architect - Applications, and other functional peers to deliver reliable, scalable, and cost-efficient infrastructure and security platforms aligned to business strategy. As the senior architect within the Infrastructure, Operations, Architecture & Cyber Defense organization, this role sets the target-state architecture that the infrastructure, network, identity, and security operations teams implement, and partners with Governance, Risk & Compliance on control and compliance architecture. Responsibilities: • Own the enterprise architecture (EA) strategy, reference architectures, and roadmaps across infrastructure, network, cloud, workplace, and security domains. • Establish and run the Architecture Steering Committee/Review Board, patterns/standards, and technology lifecycle governance for infrastructure and security. • Embed reference architectures and standards into technology transitions and into strategic service providers’ operations, so that security and resilience are designed in as delivery shifts toward the outsourced operating model. • Define multi-cloud strategy (Azure/AWS), hybrid patterns, landing zones, network segmentation, SASE/SD-WAN, and edge architectures. • Architect OT/IT convergence patterns for plant network segmentation, IIoT, and edge computing, partnering with application and operations architecture as needed. • Evaluate emerging technologies — including AI and generative-AI adoption and their security-architecture implications — in coordination with the Data, Analytics & AI function and enterprise AI governance. • Embed Zero Trust, identity, secrets management, PAM, and secure-by-design principles across the environment, in partnership with the Director, Cyber Engineering and Operations. • Define enterprise logging, telemetry, and observability architecture, including SIEM and detection data sources, in partnership with the Director, Cyber Engineering and Operations. • Ensure architectures meet SOX, NIST 800-171/CMMC, DFARS 252.204-7012, ITAR/EAR, ISO 27001, and customer contract requirements; segment and protect Controlled Unclassified Information (CUI) as required. • Define enterprise identity and access architecture (SSO/MFA, PAM, IGA) in partnership with IAM engineering. • Architect data center, compute, storage, and disaster recovery/business continuity strategy. • Lead technology due diligence for M&A from an infrastructure and security perspective; define integration blueprints and post-close modernization plans. • Rationalize infrastructure and security tooling; manage vendor strategy and total cost of ownership for infrastructure and security platforms. • Translate strategy into executable roadmaps with milestones, budgets, and KPIs. • Mentor a team of infrastructure- and security-focused domain architects; build an EA community of practice. • Partner with Finance on infrastructure cost optimization (cloud FinOps, license optimization). Qualifications: • BS in Computer Science/Engineering or related; MS/MBA preferred. • 10+ years in architecture/engineering with 5+ years leading infrastructure or security architecture in complex, global organizations; proven delivery at scale across cloud and network domains. • Deep expertise in Azure/AWS architecture, landing zones, and infrastructure as code. • Network segmentation, SASE/SD-WAN, and edge architecture experience. • Zero Trust, IAM, SSO/MFA, PAM, EDR/XDR, data protection, and logging/observability. • OT/IT convergence and plant network segmentation experience a plus. • Demonstrated experience with SOX ITGCs and regulated customer requirements (NIST 800-171/CMMC, DFARS, ITAR/EAR); contract flow-down comprehension. • Executive presence, clear storytelling, ability to influence across engineering, operations, security, and finance; vendor and SOW negotiation. • TOGAF or equivalent EA certification; Azure/AWS architect certification; CISSP/SABSA preferred. • Eligibility to work with export-controlled information; ability to obtain/maintain relevant clearances when required by customer programs. • Willingness to visit manufacturing sites and suppliers globally. • Experience in decentralized, acquisitive, multi-business manufacturing environments; able to standardize architecture while respecting business-unit autonomy. • Familiarity with multi-provider / service-integration (SIAM) operating models in which Corporate IT owns architecture and strategic providers execute operations. • Demonstrated ability and willingness to use AI tools to improve productivity, decision-making, work quality, and to reduce costs. The successful candidate must be able to identify appropriate AI use cases and critically evaluate AI-generated outputs. #LI-BM1

Requirements

Must-haves

Own the enterprise architecture (EA) strategy, reference architectures, and roadmaps across infrastructure, network, cloud, workplace, and security domains.
Establish and run the Architecture Steering Committee/Review Board, patterns/standards, and technology lifecycle governance for infrastructure and security.
Define multi-cloud strategy (Azure/AWS), hybrid patterns, landing zones, network segmentation, SASE/SD-WAN, and edge architectures.
Architect OT/IT convergence patterns for plant network segmentation, IIoT, and edge computing, partnering with application and operations architecture as needed.
Evaluate emerging technologies — including AI and generative-AI adoption and their security-architecture implications — in coordination with the Data, Analytics & AI function and enterprise AI governance.
Embed Zero Trust, identity, secrets management, PAM, and secure-by-design principles across the environment, in partnership with the Director, Cyber Engineering and Operations.
Define enterprise logging, telemetry, and observability architecture, including SIEM and detection data sources, in partnership with the Director, Cyber Engineering and Operations.
Ensure architectures meet SOX, NIST 800-171/CMMC, DFARS 252.204-7012, ITAR/EAR, ISO 27001, and customer contract requirements; segment and protect Controlled Unclassified Information (CUI) as required.
Define enterprise identity and access architecture (SSO/MFA, PAM, IGA) in partnership with IAM engineering.
Architect data center, compute, storage, and disaster recovery/business continuity strategy.
Lead technology due diligence for M&A from an infrastructure and security perspective; define integration blueprints and post-close modernization plans.
Rationalize infrastructure and security tooling; manage vendor strategy and total cost of ownership for infrastructure and security platforms.
Translate strategy into executable roadmaps with milestones, budgets, and KPIs.
Mentor a team of infrastructure- and security-focused domain architects; build an EA community of practice.
Partner with Finance on infrastructure cost optimization (cloud FinOps, license optimization).
10+ years in architecture/engineering with 5+ years leading infrastructure or security architecture in complex, global organizations; proven delivery at scale across cloud and network domains.
Deep expertise in Azure/AWS architecture, landing zones, and infrastructure as code.
Network segmentation, SASE/SD-WAN, and edge architecture experience.
Zero Trust, IAM, SSO/MFA, PAM, EDR/XDR, data protection, and logging/observability.
Demonstrated experience with SOX ITGCs and regulated customer requirements (NIST 800-171/CMMC, DFARS, ITAR/EAR); contract flow-down comprehension.
Executive presence, clear storytelling, ability to influence across engineering, operations, security, and finance; vendor and SOW negotiation.

Nice-to-haves

BS in Computer Science/Engineering or related; MS/MBA preferred.
OT/IT convergence and plant network segmentation experience a plus.
TOGAF or equivalent EA certification; Azure/AWS architect certification; CISSP/SABSA preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azureawsai

Platform: successfactors
Effort: medium