More jobs:
Security Architect and ZeroTrust Solution Engineer
Job in
Queens, Queens County, New York, 11120, USA
Listed on 2026-10-31
Listing for:
Estée Lauder
Full Time
position Listed on 2026-10-31
Job specializations:
-
IT/Tech
Cybersecurity, Cloud Computing: Infrastructure & Operations, Systems Engineer, IT Consultant
Job Description & How to Apply Below
You will play a key role in leading tasks including, but not limited to, the following.
Lead architecture design and implementation- of Illumio microsegmentation and Zero Trust network controls across data centers, cloud, and OT environments.
Develop enterprise security architecture blueprints- that define segmentation strategy, enforcement zones, and secure communication pathways.
Integrate Illumio with security ecosystems — including CMDB, SIEM, SOAR, and vulnerability management tools.
Provide architectural governance- and design reviews to ensure consistent adoption of Zero Trust principles.
Collaborate with infrastructure, cloud, and application teams- to design secure workload architectures and define security guardrails.
Create architecture standards, reference designs, and policy frameworks- for segmentation and secure access.
Assess emerging threats and technologies-, recommending architectural improvements that enhance visibility and containment.
Support risk assessments, compliance initiatives- and technology evaluations for network and workload segmentation.
Mentor security engineers- and drive knowledge sharing around Illumio architecture, enforcement best practices, and operational handoffs.
Developing and managing productive working relationships with vendors, business partners, and service providers to ensure they meet the needs of the organization.
Partnering with IT teams to ensure disaster recovery policies and procedures are effectively implemented.
You will be responsible for:
Partner with ECR team members, IT stakeholders, and business owners to bring down the risk of technology to the company by identifying and evaluating technology and cyber risks as they are identified
Responsible for reviewing risks through triage and evaluative score risk level and severity with a focus on defining a potential path for remediation
Collaborate to define appropriate solutions to mitigate or remediate the risk by partnering with key stakeholders Enable balanced risk decisions by providing recommendations, escalating based on severity and risk level to ensure appropriate cyber protection capabilities and resiliency are built into the plans. Maintain basic project management documentation tracking project tasks, status, ownership, issue closure, and timelines.
Coordinate and support cross-functional project teams to track overall remediation status while coordinating with applicable team and Program Managers.
Prepare and provide reporting and dashboard status(s) on a scheduled basis to include Risk Reduction Governance Meetings.
Develops and delivers risk reports including vulnerabilities and threats
Partners with the appropriate ECR leadership in data reporting to drive remediation of vulnerabilities oversight, ensuring appropriate risk escalation and reporting
Qualifications
Bachelor’s degree in computer science, Information Security, or related field7+ years of experience in cybersecurity architecture or engineering, with a focus on enterprise or hybrid environments.
3+ years of hands-on experience with Illumio Core and/or Edge, including policy design, PCE/VEN management, and segmentation strategy.
Strong understanding of Zero Trust Architecture (ZTA) and lateral movement defense techniques.
Experience in network and cloud architecture (Azure, AWS, GCP) and containerized environments (Kubernetes, Docker).Proficient in Excel, PowerPoint and Power BI Reporting.
Required Education You have an undergraduate degree in technology or equivalent professional experience
Certifications (Preferred)
Illumio Certified Technical Specialist (ICTS) or equivalent.
CISSP, CCSP, or GIAC (e.g., GDSA, GRID).Cloud security certifications (Azure/AWS Security Specialty).NIST Zero Trust or SABSA/TOGAF certification a plus.
Technical Requirements Deep understanding of TCP/IP, routing, firewalls, DNS, and access control.
Experience designing Zero Trust enforcement policies and…
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×