This is a technical role responsible for executing the design, building, testing, and implementation of security systems across our environment, with a specific emphasis on endpoint security and mobility. You will work closely with other members of the Information Security team to identify potential threats and vulnerabilities and develop strategies and solutions to mitigate these risks, securing the end-user device estate and the mobile platforms through which the enterprise increasingly operates, and contributing to our overall information security strategy.
This position can be virtual anywhere in the U.S.
You will join the Business Technology Solutions (BTS) Information Security and Risk Management (ISRM) Architecture organization. Our team translates business objectives and cyber risk strategy into concrete security measures — processes, technologies, and services — across a diverse and complex infrastructure landscape, including on-premises, cloud, and X-as-a-Service models.
Responsibilities:
- Define and evaluate security architecture for the end-user device estate — workstation and laptop hardening, EDR/endpoint protection (e.g., CrowdStrike, Defender), data protection, and configuration baselines.
- Advise on mobility security: MDM/UEM (e.g., Microsoft Intune), mobile application management, conditional access, and BYOD posture across iOS and Android.
- Perform Security Architecture Reviews — adjudicate submissions, align the risk and controls with the system owner, and ensure review quality.
- Deliver Security Architecture Consulting engagements with business partners — own each engagement end to end, with timely turnaround and clear customer communication.
- Provide Risk Evidence Review on request, partnering with Risk Management to evaluate control and mitigation effectiveness for risk owners.
- Plan, design, build, and implement enterprise security architecture, and create relevant documentation of same.
- Evaluate security technologies and controls across the environment — including those employed by third-party providers — developing strategies, determining which controls fit a given situation, and adapting them to business needs, risk, and the threat landscape.
- Identify and communicate current and emerging security threats and risks; design security architecture elements and propose new or revised measures to mitigate them as they emerge.
- Help develop solutions that balance information security needs with the needs of the business, in collaboration with team members and business and IT stakeholders.
- Be fluent with AI concepts and incorporate AI into your daily workflows — using AI to accelerate design reviews, threat modeling, documentation, and analysis — targeting improved efficiency, quality, and speed.
- Create reusable security-architecture artifacts — reference architectures, design patterns, security guidelines, and security positions — that scale the team's expertise beyond one-off engagements.
- Identify recurring problems and build durable systems, patterns, and standards that solve them at the root — not only technical problems, but process and people problems too — so the same issue does not keep resurfacing.
- Support training and mentorship of more junior employees as well as employees outside the Information Security Team, as needed.