Principal Architect - Industrial Networks, Isolation and Network Governance

Job Description Summary

The Principal Architect will use their experience and advanced knowledge of principles, theories, and concepts of security, networks, cloud, and software defined technologies to create secure network solutions that solve immediate and future challenges of GE VERNOVA's infrastructure initiatives related to the spin, implementing appropriate segmentation to protect the Vernova business, ensuring a clean transition while the network conveys to Vernova, enabling the TSA commitments while transforming the future of secure work across VERNOVA leveraging innovative technologies and industry best practices.

In this position you will work on highly complex projects that requires in-depth knowledge within Network Architecture, Infrastructure Security and Operations technical domain in addition to understanding of how network security impacts/depends on other technical products in infrastructure - e.g. Identity, network, digital workplace, cloud and hosting. Principal Architect Industrial Networks and Isolation will own product architecture for OT isolation and OT LAN/wireless architecture as well as global segmentation architecture for all network products. In addition, this role will own global network governance for access management, service management, audits, SOX and any regulated use cases.

• Defines and owns the network solution architecture building blocks across multiple use cases for segmentation technologies (Next-Gen Firewalls, Threat management, SASE, OT, Labs, M&D) in partnership with the subject matter experts from the Network architecture and product organizations.
• Owns architecture and overall governance of network isolation and segmentation for industrial domain (OT Segmentation, Inspection, Isolation, internet egress security, DMZ use, 3rd Party Rail use, Cloud Networking, and other Edge network security components that may be relevant to industrial use cases)
• Owns critical network governance processes - audit schedule, execution and coordination of remediation, network access governance and standards, ITSM processes related to network architecture and any regulatory driven processes applied to network (e.g. SOX remediation).
• Partner with SMO and CTO organizations to identify & prioritize network projects and features release across the Network product portfolio reporting to the Network Architecture leader
• Together with network security architecture and Edge product, build the foundations for a Zero Trust Network Access application to OT environments.
• Work closely with peers from the Network and Cyber security organization and other internal Teams to develop requirements, map dependencies and define timelines for new projects and initiatives.
• Provide guidance to internal teams working on projects with strong dependencies on the Network products and services.
• Participate in the development of automation solutions to improve the Network products and services (simplify operations, reduce time to market, increase availability...).
• Ensure for all new solutions that the development of software, data and/or technology platforms are service-oriented with reusable components across teams (multiple teams) that can be orchestrated together into different methods for different businesses.
• Together with business technology teams, lead the research and evaluation of emerging technology, industry and market trends to assist in project development and/or operational support activities to for multiple teams or complex scenarios.
• There is no direct financial responsibility, however financial mindset and rigor are expected as part of the solution design process.

• Bachelor's Degree in Computer Science or in "STEM" Majors (Science, Technology, Engineering and Math) and/or minimum of 12 years of professional experience in a technical area (Security Architecture, or Information Technology) or (a high school diploma / GED with at least 8 years of experience in Information Technology or Software).
• Relevant certifications in the network and cloud space are a big plus

• A minimum of 10 years of proven experience in the network and network security, design, and implementation, with a strong focus on large-scale, complex enterprise environments and modern security solutions (NGFWs, SASE/SSE, Cloud Security, virtualization, and automation)
• Track record of delivering large scale OT solutions in multiple businesses using Next-Gen Firewalls.
• Strong understanding of cybersecurity standards and frameworks e.g. ISO27001, NIST, CIS, OWASP, SOC2
• Understands technical and business discussions relative to future architecture direction aligning with business goals.
• Understanding of TCP/IP network architectures to meet business application system qualities
• Knowledge of Cloud computing (AWS or Azure) and Cloud providers network connectivity and concepts (Direct Connect, Express Route, route 53, TGW, V-WAN Hub...)
• Working knowledge of Identity Services and how they relate to network security solutions
• Experience with one or more network virtualization platforms
• Understands concepts of setting and driving architecture direction.
• Familiar with elements of gathering architecture requirements.
• Understands architecture standards concepts to apply to project work.

• Understand key cross-functional concepts that impact the organization; is aware of business priorities and organizational dynamics.
• Familiar with concepts of costing hardware and software components. Works to assure work is on-time and within budget.
• Recommends expenditures based on the size, scope, and cost of hardware and software components. Assists in developing business cases.
• Delivers tasks on-time with alignment to architectural goals. Can identify and raise issues, risks, and benefits. Participates in change initiatives by implementing new directions and providing appropriate information and feedback. Personal Attributes:
• Applies values, policies, procedures, and precedent to make timely, routine decisions of limited, clear choice.
• Reacts open-mindedly to new perspectives or ideas. Considers different or unusual solutions when appropriate.
• Resolves day-to-day issues related to strategy implementation. Escalates issues that impact the client and/or strategic initiatives.

• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one
• Strong interpersonal skills, with an emphasis on the ability to effectively influence others
• A team-focused mentality with the proven ability to work effectively with diverse stakeholders
• An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative, and actionable manner
• Takes a systems perspective that inter-relates internal and external factors for planning.
• Envisions, compares, and contrasts multiple potential medium range operational futures.
• Challenges conventional thinking and traditional ways of operating and invites stakeholders to identify issues and opportunities.