Cybersecurity Architect

Job Description Summary GE Vernova's Electrification Software's largest Grid Software Global Delivery Center is based in Bucharest. It allows us to bring a significant contribution to the Worldwide Electrical Energy context. We deliver mission-critical solutions that drive the energy transition, focusing on Energy Transmission, Distribution, Asset Management, and Market Management to shape the current and future energy environment. This position will work on highly complex projects that require in-depth domain knowledge in two or more specialized areas. They are responsible for driving the design and implementation efforts related to architecture, scalability, availability and performance alignment w/ the product roadmap with a focus on application development & automation. They may interact w/ functional leaders to support these technical initiatives. Job Description Roles and Responsibilities Architecture & Roadmap Development  Participate in domain technical and business discussions related to future architecture direction for ICS/OT environments.  Assist in the analysis, design, and development of secure infrastructure roadmaps, ensuring alignment between current and future state architectures.  Gather and analyze data to define architectural requirements at the project level.  Enforce the ICS/OT security architecture governance model and ensure adherence to standards across project delivery.  Design and deploy secure ICS and IT/OT infrastructure solutions, ensuring compliance with IEC 62443, NERC CIP, and ISO27001/27002 standards.  Research and evaluate emerging ICS/OT cybersecurity technologies and threat intelligence to enhance project outcomes.  Coach and mentor project teams and customer stakeholders on ICS cybersecurity best practices. Cybersecurity in Project Implementation  Act as a technical authority in the design and deployment of project infrastructure supporting ICS/OT systems (network segmentation, secure remote access, virtualization, backups, monitoring).  Integrate and configure ICS/OT security tools (firewalls, intrusion detection, asset inventory, anomaly detection) into customer environments.  Conduct vulnerability assessments, compliance checks, and security hardening activities within the scope of project delivery.  Ensure all project activities are carried out in compliance with ICS-relevant standards (ISO9001, ISO27001, IEC 62443) and company processes.  Translate business and operational requirements into secure technical solutions that strengthen cyber resilience for customer environments. Required Qualifications  Bachelor's Degree with significant professional experience.  Proven experience in ICS/OT cybersecurity engineering and implementation projects.  Familiarity with applying ICS security frameworks (IEC 62443, NIST CSF, NERC CIP) in projects.  System administration: Windows – core competency to install, configure, manage.  Linux administration and security expertise.  Network hardware: Cisco enterprise and industrial switches, VLAN, ACL, routing, VPN, and network segmentation for ICS environments.  Security management: Enterprise firewalls (Cisco ASA, Fortinet, Palo Alto, or equivalent) – design, configure, deploy, with emphasis on OT perimeter defense and secure remote access.  Windows / Active Directory Services – install, configure, manage.  Virtualization: VMware vSphere clusters, with experience in HA, DRS, and backup APIs.  Storage: Shared NAS/SAN network storage (HP 3PAR/MSA/EVA, EMC DataDomain).  Backup Technologies (NetBackup, BackupExec, Veeam, Networker).  Knowledge of anti-virus implementations (McAfee EPO, Bitdefender, Microsoft Forefront, etc.).  Experience with IPAMs and password management solutions.  Experience with monitoring, logging, and SIEM tools (Nagios, Graylog, Splunk, Claroty, Nozomi, Dragos).  Strong cybersecurity foundation with demonstrated OT project delivery experience. Desired Characteristics  Experience in support/incident management (L1/L2/L3) for ICS/OT security tools, incident response, and vulnerability remediation.  Willingness to travel abroad for on-site project delivery (up to 50% of the time or more).  Fluent in English.  Degree or Diploma in Computer Science or equivalent knowledge or experience.  Proven track record of problem analysis, identification, and resolution.  Excellent communication skills, discipline, accountability, and flexibility in a project-driven environment.  Strong understanding of ITIL and change management policies and procedures.  Hands-on experience in technical roles within critical infrastructure or industrial environments.  Understanding of architecture standards concepts and ability to apply them to project work . Why join our team: GE Vernova is proud to be an equal opportunity employer, committed to the continuous improvement and the wellbeing of its employee. We are offering fully customized development and training programs all throughout the year, on top of a LinkedIn Learning subscription and full access to GE Vernova's learning database. Our wellbeing program will allow you to benefit from multiple events focused on a healthy lifestyle, free apps to support your healthy habits and free employee assistance program, provided by specialized counselors. Also, we are offering: Strong induction process (a dedicated 1-month ramp-up period). Flexible working hours and a well-defined hybrid working policy. Private Medical Insurance for you (can also be extended for family members). Attractive financial compensations for roles involving external travels and on-site missions. Fully customized development and training programs all throughout the year. Increased number of vacation days, according to your work-experience, encompassed by an annual bonus payout. Annual, performance-based, salary review. Multiple subscriptions, discounts and vouchers available (such as Bookster subscription, corporate discount to fitness services, gift vouchers for Christmas and Easter holiday, daily meal vouchers, additional days off such as 8th of March and 3rd Easter Day and children's benefits, including gifts for special occasions, vouchers, and events) etc. Our Culture At GE Vernova, we believe in the value of your unique identity, background, and experiences. We are committed to fostering an inclusive culture, where everyone feels empowered to do their best work because they feel accepted, respected, and that they belong. By embracing inclusive teams and perspectives, we are better equipped to build a world that works. GE Vernova's Global Delivery Center in Bucharest is not only a workplace, but also a community where members are actively involved in different initiatives such as personal development workshops, book clubs, sports competitions, charity events, volunteering on greening and afforestation and dedicated events for employees' children. Additional Information Relocation Assistance Provided: No Addressing the climate crisis is an urgent global priority and we take our responsibility seriously. That is our singular mission at GE Vernova: continuing to electrify the world while simultaneously working to help decarbonize it. If we want our energy future to be different…we must be different. Our mission is embedded in our name. We retain our treasured legacy, "GE," in our name as an enduring and hard-earned badge of quality and ingenuity. "Ver" / "verde" signal Earth's verdant and lush ecosystems. "Nova," from the Latin "novus," nods to a new, innovative era of lower carbon energy that GE Vernova will help deliver. Together, we have The Energy to Change the World. www.gevernova.com