Cybersecurity Architecture and Security Operations Expert

1. Firewall Design and Configuration

· Configure and manage firewalls from vendors such as Palo Alto Networks and Fortinet.

· Design firewall architectures, including rule sets, segmentation models, and security policies.

· Conduct periodic audits and assessments to validate firewall effectiveness.

2. DNS Management

· Configure and maintain secure DNS infrastructures.

· Apply DNS security policies to mitigate threats such as spoofing and cache poisoning.

· Monitor and analyze DNS traffic to detect anomalies and emerging risks.

3. Cloud-Based Cybersecurity Solutions

· Design and implement security architectures for AWS, Azure, and Google Cloud.

· Configure cloud-native security tools including WAF, IDS/IPS, and IAM services.

· Ensure adherence to relevant cloud security standards, regulatory requirements, and best practices.

4. Security Architecture Documentation

· Produce and maintain detailed security architecture documentation, including diagrams, policies, and procedures.

· Develop configuration guides and operational documentation for deployed solutions.

· Collaborate with cross-functional teams to ensure documentation remains accurate and accessible.

5. Risk Assessment and Mitigation

· Conduct risk assessments and vulnerability analyses to identify and mitigate threats.

· Implement proactive and reactive measures to protect systems and data.

· Stay informed of cybersecurity trends, tools, and threat landscapes to improve overall posture.

6. Knowledge of Cybersecurity Regulations

· Demonstrate a deep understanding of IEC 62443, the Purdue Model, NIS2, ISO 27001, and related standards.

· Ensure security solutions comply with applicable regulations and internal policies.

· Participate in audits and compliance activities to ensure ongoing adherence.

We adapt to you:

🕓 With our flexible schedule, you'll have the freedom to adjust your work hours to accommodate your personal needs and responsibilities.

💻 We know how great it is to work from home. With our hybrid work plan, you can enjoy working from the comfort of your home.

🏝 Need more time to relax and disconnect? With our Holy Pack, you can purchase additional vacation days to recharge when you need it most.

📅 Celebrate holidays your way! With Floating Holidays, you can exchange holidays for other days that better suit your plans and personal preferences.

🧘Need additional time to explore new experiences or focus on personal projects? With the Sabbatical Pack, you can request up to 2 months of extra leave (unpaid).

💞 We value the importance of family and want to support you in all aspects of your life. Our Global Family Leave Policy provides flexible paid conditions for when you need it most, whether you're about to be a parent, need time to overcome a loss, or to care for a loved one.

We take care of you:

📱 With access to the health and wellness platform Wellwo, you and up to 5 people of your choice can enjoy access to wellness content, nutrition counseling, fitness classes, and more!

🏄From dance classes to booking a hotel spa, we offer an agreement with Wellhub so you can access a network of thousands of gyms and sports centers to keep your body active in the way you like best.

🩺 Your well-being is our priority. You will have medical service at your workplace for close attention to any medical needs.

We empower you:

🎯 With Career Hub, our AI-driven professional development platform, you can connect with job opportunities, projects, and mentors at Schneider Electric globally.

🤑 We offer you the opportunity to be a shareholder of Schneider Electric and share in our achievements with our stock ownership program.

🙌 We celebrate everyone's talent and success with our recognition program, through which you can give and receive points for your achievements and redeem them for gift cards at your favorite stores.

💗 You will have life insurance for your protection.

💰 We offer you a Flexible Remuneration Plan in which you can choose from a variety of options, such as health insurance, meal vouchers, childcare vouchers, transportation vouchers, training, and more.

🎁 With Club Schneider, you will enjoy special discounts at your favorite stores, restaurants, travel agencies, and other external services.

💚 Participate in company-subsidized volunteer programs to contribute to our community and have a positive impact on your environment.

We are your Energy Technology Partner. We electrify, automate, and digitalize every industry, business, and home, driving efficiency and sustainability for all.

At Schneider Electric, our values - IMPACT (Inclusion, Mastery, Purpose, Action, Curiosity, Teamwork) - are the foundation of everything we do. Becoming an Impact Maker means turning sustainability ambitions into actions at the intersection of automation, electrification, and digitization.

Are you ready to lead the digital transformation to create a more sustainable world?

If you are up to challenge your creativity and make an impact, we are excited to welcome you!

Schneider Digital is the digital department of Schneider Electric, leading the digital transformation in the company by giving support globally to our internal teams and our clients. Schneider Digital consists of 6 Digital Hubs worldwide which are strategically located to ensure a 24/7 support across the company (France, China, India, USA, Mexico and Spain). Our Digital Hub in Barcelona is formed by +450 employees working in strategic projects and different roles such as Data, Cybersecurity, ERP, Cloud, Infrastructures, IT Project Management or Digital Marketing.

The Senior Cybersecurity Architect will be responsible for designing, guiding the deployment of, and maintaining the organization's security architecture, ensuring the protection of digital assets against evolving cyber threats. He/She will collaborate closely with IT, engineering, and business stakeholders to ensure that security solutions are effective, scalable, and fully aligned with the company's strategic objectives.

The ideal candidate brings extensive hands-on experience in cybersecurity and a proven ability to design, implement, and oversee complex security architectures across enterprise and cloud environments.

They must demonstrate expert proficiency in configuring and managing next-generation firewalls from leading vendors such as Palo Alto Networks and Fortinet. This includes architecting segmentation strategies, defining policies and access control frameworks, and conducting comprehensive audits to validate resilience and effectiveness.

Strong expertise in DNS administration is essential. The candidate should be capable of securing and maintaining DNS infrastructures, implementing mechanisms to defend against threats such as DNS spoofing and cache poisoning, and continuously monitoring DNS telemetry to identify abnormal or malicious activity.

A solid background in cloud security is required, with experience designing protections for AWS, Azure, and Google Cloud environments. Candidates should be proficient in deploying and managing services such as web application firewalls (WAF), intrusion detection and prevention (IDS/IPS), as well as identity and access management (IAM) systems. Ensuring adherence to cloud security standards, best practices, and regulatory requirements is a key part of the role.

The Senior Cybersecurity Architect must also excel in producing high-quality technical documentation. This includes architecture diagrams, configuration guides, operational procedures, and security design documentation that effectively supports deployment, maintenance, and cross-team collaboration.

Risk assessment and threat mitigation are core responsibilities.

The candidate should have tangible experience conducting risk analyses, identifying vulnerabilities, and implementing both proactive and reactive controls to strengthen the organization's cybersecurity posture. Staying current with emerging threats, industry trends, and innovative technologies is essential to ensure continuous improvement.

Finally, the role requires strong knowledge of cybersecurity frameworks and regulations such as IEC 62443, the Purdue Model, NIS2, ISO 27001, and related standards.

The candidate will ensure that implemented security solutions meet regulatory expectations, support compliance efforts, and contribute actively to audits and assessments.