Cybersecurity Architect at GE Vernova in Bucharest

Job description

Job Description Summary GE Vernova’s Electrification Software’s largest Grid Software Global Delivery Center is based in Bucharest. It allows us to bring a significant contribution to the Worldwide Electrical Energy context. We deliver mission-critical solutions that drive the energy transition, focusing on Energy Transmission, Distribution, Asset Management, and Market Management to shape the current and future energy environment. This position will work on highly complex projects that require in-depth domain knowledge in two or more specialized areas. They are responsible for driving the design and implementation efforts related to architecture, scalability, availability and performance alignment w/ the product roadmap with a focus on application development & automation. They may interact w/ functional leaders to support these technical initiatives. Job Description Roles and Responsibilities Architecture & Roadmap Development · Participate in domain technical and business discussions related to future architecture direction for ICS/OT environments. · Assist in the analysis, design, and development of secure infrastructure roadmaps, ensuring alignment between current and future state architectures. · Gather and analyze data to define architectural requirements at the project level. · Enforce the ICS/OT security architecture governance model and ensure adherence to standards across project delivery. · Design and deploy secure ICS and IT/OT infrastructure solutions, ensuring compliance with IEC 62443, NERC CIP, and ISO27001/27002 standards. · Research and evaluate emerging ICS/OT cybersecurity technologies and threat intelligence to enhance project outcomes. · Coach and mentor project teams and customer stakeholders on ICS cybersecurity best practices. Cybersecurity in Project Implementation · Act as a technical authority in the design and deployment of project infrastructure supporting ICS/OT systems (network segmentation, secure remote access, virtualization, backups, monitoring). · Integrate and configure ICS/OT security tools (firewalls, intrusion detection, asset inventory, anomaly detection) into customer environments. · Conduct vulnerability assessments, compliance checks, and security hardening activities within the scope of project delivery. · Ensure all project activities are carried out in compliance with ICS-relevant standards (ISO9001, ISO27001, IEC 62443) and company processes. · Translate business and operational requirements into secure technical solutions that strengthen cyber resilience for customer environments. Required Qualifications · Bachelor’s Degree with significant professional experience. · Proven experience in ICS/OT cybersecurity engineering and implementation projects. · Familiarity with applying ICS security frameworks (IEC 62443, NIST CSF, NERC CIP) in projects. · System administration: Windows – core competency to install, configure, manage. · Linux administration and security expertise. · Network hardware: Cisco enterprise and industrial switches, VLAN, ACL, routing, VPN, and network segmentation for ICS environments. · Security management: Enterprise firewalls (Cisco ASA, Fortinet, Palo Alto, or equivalent) – design, configure, deploy, with emphasis on OT perimeter defense and secure remote access. · Windows / Active Directory Services – install, configure, manage. · Virtualization: VMware vSphere clusters, with experience in HA, DRS, and backup APIs. · Storage: Shared NAS/SAN network storage (HP 3PAR/MSA/EVA, EMC DataDomain). · Backup Technologies (NetBackup, BackupExec, Veeam, Networker). · Knowledge of anti-virus implementations (McAfee EPO, Bitdefender, Microsoft Forefront, etc.). · Experience with IPAMs and password management solutions. · Experience with monitoring, logging, and SIEM tools (Nagios, Graylog, Splunk, Claroty, Nozomi, Dragos). · Strong cybersecurity foundation with demonstrated OT project delivery experience. Desired Characteristics · Experience in support/incident management (L1/L