Enterprise Endpoint Security Architect

What you'll do

• Lead the architectural design for core Enterprise Defense capabilities including endpoint protection, EDR, XDR, and application control.
• Own vulnerability and exposure management through scanning and Continuous Threat Exposure Management (CTEM).
• Design cloud and SaaS posture strategies including CSPM and SSPM for multi-cloud environments.
• Architect messaging and gateway defenses such as Secure Email Gateways and DMARC/DKIM/SPF protocols.
• Lead network and perimeter defense initiatives including Security Service Edge, traffic inspection, and Data Loss Prevention.
• Design deception and active defense capabilities using honeypots, decoys, and canary tokens.
• Define enterprise defense reference architectures and integration patterns across on-premises, hybrid, and multi-cloud substrates.
• Design automated workflows to connect vulnerability discoveries, threat intelligence, and remediation prioritization.

What we're looking for

• You must have 15 or more years of progressive experience in cybersecurity engineering, network security, and infrastructure defense.
• You must have 8 or more years of experience in an enterprise security architect role overseeing multi-domain defense stacks.
• You must have expertise architecting EDR and XDR platforms and Application Control solutions.
• You must have a deep understanding of CSPM and SSPM tools.
• You must be proficient with vulnerability platforms and API-integrated email security tools.
• You must have in-depth knowledge of Secure Web Gateways, SSL/TLS decryption at scale, and secure browsers.
• You must have hands-on experience designing deception environments, including honeypots and canary tokens.
• You must have experience with cloud platform services in AWS and/or Azure.
• You must have experience with continuous integration platforms such as Jenkins, Spinnaker, or GitLab CI.
• You must have a related technical degree.
• You must be able to create Proof of Concept architecture with code.
• You must be able to mentor team members on architecture and technical development.
• You should hold certifications such as CISSP, CCSP, or TOGAF (preferred).
• You should have experience with Kubernetes, Docker, and Terraform (preferred).
• You should have experience with monitoring tools such as ELK, Grafana, or AppDynamics (preferred).
• You should have experience with Agile development methodology (preferred).