End-Point Security 7

Job description

The architect will partner closely with Cybersecurity, Infrastructure, Identity & Access Management, Network Security, Cloud Engineering, and Operations teams to design secure endpoint solutions that align with Zero Trust principles, regulatory requirements, and enterprise security objectives.

Key ResponsibilitiesEndpoint Security Architecture

• Develop, maintain, and govern enterprise endpoint security architectures and roadmaps. Define security standards, reference architectures, design patterns, and implementation guidance for endpoint technologies. Lead architecture reviews and ensure endpoint solutions align with enterprise security standards. Design endpoint security controls supporting Windows, macOS, mobile devices, and remote users. Support Zero Trust security initiatives and endpoint access strategies. Endpoint Protection & DetectionDesign and govern endpoint protection platforms including: Microsoft Defender for EndpointCrowdStrike FalconSentinelOneTaniumCarbon BlackSimilar EDR/XDR solutions
• Define endpoint telemetry, logging, threat detection, and response requirements. Collaborate with Security Operations teams to improve endpoint visibility and threat detection coverage. Endpoint Management & Modern WorkplaceArchitect modern endpoint management solutions utilizing: Microsoft IntuneMicrosoft Autopilot

Microsoft Configuration Manager (MECM/SCCM)

• Workspace ONEJamfDevelop endpoint compliance, configuration baseline, and device lifecycle management strategies. Support BYOD, mobile device management (MDM), and unified endpoint management (UEM) initiatives. Identity & Zero TrustPartner with IAM teams to implement: Conditional AccessDevice TrustMulti-Factor Authentication (MFA)
• Least Privilege AccessPrivileged Access ManagementAlign endpoint security architecture with NIST 800-207 Zero Trust principles. Risk, Governance & ComplianceConduct endpoint security architecture reviews and risk assessments. Participate in architecture governance processes and technical design reviews. Develop security standards, configuration baselines, and hardening requirements. Support compliance initiatives aligned to: NERC-CIPNIST Cybersecurity FrameworkNIST 800-53CIS ControlsRegulatory and audit requirements
• Technical LeadershipProvide technical leadership and mentorship to engineers and architects. Evaluate emerging endpoint security technologies and recommend future-state solutions. Influence architecture decisions across multiple technology teams and business units. Required Qualifications8+ years of experience in Endpoint Security, Security Architecture, Endpoint Engineering, or related disciplines. Experience designing and securing large enterprise endpoint environments. Deep knowledge of endpoint security concepts including: EDR/XDR

Endpoint hardening

Device compliance

Privileged access controls

Endpoint telemetry

• Experience with Microsoft Intune and Microsoft Defender for Endpoint. Experience with endpoint management and deployment platforms. Experience implementing Zero Trust security controls. Strong understanding of Windows endpoint security architecture. Experience developing enterprise security standards and technical documentation. Knowledge of NIST 800-53, NIST 800-207, CIS Controls, and defense-in-depth principles. Preferred QualificationsExperience supporting highly regulated environments, critical infrastructure, energy, utility, nuclear, or government organizations. Experience with: CrowdStrike FalconTaniumSentinelOneJamfWorkspace ONEServiceNow
• Experience with cloud security integration across Microsoft 365, Azure, and AWS. Experience conducting threat modeling and endpoint risk assessments. Experience leading enterprise endpoint modernization initiatives. Preferred CertificationsCISSPMicrosoft Certified: Endpoint Administrator AssociateMicrosoft Certified: Azure Security Engineer AssociateMicrosoft Certified: Security Operations Analyst AssociateCrowdStrike Certified Falcon AdministratorTanium Certified ProfessionalGIAC (GSEC, GCIH, GCED, GCIA)

Microsoft Defender for Endpoint Certifications Ideal Candidate Profile

The ideal candidate combines endpoint security architecture, Zero Trust strategy, endpoint management, and regulatory compliance experience within large enterprise or critical infrastructure environments. They are capab.