Lead, Security Architect And Zerotrust Solution Engineer

ESTÉE LAUDER - BRAND
New York, NY
Description As the Lead, Cybersecurity Architect and Zero Trust solution Engineer within ECR's Cybersecurity Architecture, Technology & Solutions team, you will serve as the primary technical lead and subject-matter expert for Illumio rollout , responsible for architecture design, implementation oversight, and operational integration within the broader Zero Trust framework. This role combines architectural leadership with hands-on execution , ensuring segmentation strategy translates into measurable protection outcomes across servers, cloud workloads, endpoints, and OT environments. You will play a key role in leading tasks including, but not limited to, the following.
  • Lead architecture design and implementation- of Illumio microsegmentation and Zero Trust network controls across data centers, cloud, and OT environments.
  • Develop enterprise security architecture blueprints- that define segmentation strategy, enforcement zones, and secure communication pathways.
  • Integrate Illumio with security ecosystems - including CMDB, SIEM, SOAR, and vulnerability management tools.
  • Provide architectural governance - and design reviews to ensure consistent adoption of Zero Trust principles.
  • Collaborate with infrastructure, cloud, and application teams- to design secure workload architectures and define security guardrails.
  • Create architecture standards, reference designs, and policy frameworks - for segmentation and secure access.
  • Assess emerging threats and technologies -, recommending architectural improvements that enhance visibility and containment.
  • Support risk assessments, compliance initiatives - and technology evaluations for network and workload segmentation.
  • Mentor security engineers- and drive knowledge sharing around Illumio architecture, enforcement best practices, and operational handoffs.
  • Developing and managing productive working relationships with vendors, business partners, and service providers to ensure they meet the needs of the organization.
  • Partnering with IT teams to ensure disaster recovery policies and procedures are effectively implemented.
You will be responsible for:
  • Partner with ECR team members, IT stakeholders, and business owners to bring down the risk of technology to the company by identifying and evaluating technology and cyber risks as they are identified
  • Responsible for reviewing risks through triage and evaluative score risk level and severity with a focus on defining a potential path for remediation
  • Collaborate to define appropriate solutions to mitigate or remediate the risk by partnering with key stakeholders
  • Enable balanced risk decisions by providing recommendations, escalating based on severity and risk level to ensure appropriate cyber protection capabilities and resiliency are built into the plans.
  • Maintain basic project management documentation tracking project tasks, status, ownership, issue closure, and timelines.
  • Coordinate and support cross-functional project teams to track overall remediation status while coordinating with applicable team and Program Managers.
  • Prepare and provide reporting and dashboard status(s) on a scheduled basis to include Risk Reduction Governance Meetings.
  • Develops and delivers risk reports including vulnerabilities and threats
  • Partners with the appropriate ECR leadership in data reporting to drive remediation of vulnerabilities oversight, ensuring appropriate risk escalation and reporting
Qualifications
    • Bachelor's degree in computer science, Information Security, or related field
    • 7+ years of experience in cybersecurity architecture or engineering , with a focus on enterprise or hybrid environments.
    • 3+ years of hands-on experience with Illumio Core and/or Edge , including policy design, PCE/VEN management, and segmentation strategy.
    • Strong understanding of Zero Trust Architecture (ZTA) and lateral movement defense techniques .
    • Experience in network and cloud architecture (Azure, AWS, GCP) and containerized environments (Kubernetes, Docker).
    • Proficient in Excel, PowerPoint and Power BI Reporting.
    Required Education
    • You have an undergraduate degree in technology or equivalent professional experience
    Certifications (Preferred)
    • Illumio Certified Technical Specialist (ICTS) or equivalent.
    • CISSP, CCSP, or GIAC (e.g., GDSA, GRID).
    • Cloud security certifications (Azure/AWS Security Specialty).
    • NIST Zero Trust or SABSA/TOGAF certification a plus.
    Technical Requirements
    • Deep understanding of TCP/IP, routing, firewalls, DNS, and access control .
    • Experience designing Zero Trust enforcement policies and segmentation models (role-based, app-based, and zone-based).
    • Hands-on exposure to Illumio integrations (SIEM, SOAR, CMDB, EDR, or vulnerability tools).
    • Familiarity with identity-centric architectures , Zero Trust Network Access (ZTNA) , and microsegmentation alternatives (Cisco Secure Workload, Guardicore, etc.).
    • Strong skills in automation and scripting (Python, REST APIs, PowerShell).
    • Ability to map complex application dependencies for segmentation and risk prioritization.
    • Problem-Solving and Proactivity: Ability to identify opportunities for improvement and assist in the implementation of solutions. Initiative and autonomy in supporting ECR's strategic and operational goals.
    • Cybersecurity Knowledge: Cybersecurity skills include exposure to multiple cybersecurity domains e.g. cybersecurity architecture, engineering, operations, IDAM.
    • Expertise in cybersecurity attacks and controls and how one works against the other. Experience with industry cybersecurity best practices and domains, with a constant willingness to learn more.
    • Leadership Experience
      • A Natural Leader and Results-Driven Lead: You inspire and guide collaborative team with a clear vision, setting goals that align with organizational objectives.
      • An Effective Communicator and Change Champion: You foster open communication within team, making informed decisions and lead your projects and goals through change with adaptability and resilience.
      • Performance Management & Development: You have demonstrated success in managing your performance across key projects/programs.
      • Analytical Thinking: You possess strong analytical skills to assess and address complex challenges.
      • Attention to Detail: You demonstrate meticulous attention to detail in designing and implementing secure processes.
      • Collaboration / Relationship Building: You thrive in a highly collaborative environment, building strong partnerships with various stakeholders and cross-functional partners.
Posted 2026-04-15

Recommended Jobs

EUC Engineer

Hachette Book Group
New York, NY

Role Overview Hachette Book Group is hiring an EUC Technician to support the deployment, administration, and day-to-day management of enterprise endpoint platforms, Office 365 services, and collabo…

View Details
Posted 2026-04-11

Kitchen Cleaning manager

New Paltz, NY

Kitchen Cleaning manager » » » »

View Details
Posted 2026-04-16

Travel Registered Nurse ICU Job

Utica, NY

Job Overview TLC Nursing Associates, Inc. is seeking a highly skilled Registered Nurse (RN) – Intensive Care Unit (ICU) to provide specialized nursing care to critically ill patients. The ICU RN …

View Details
Posted 2026-02-28

Customer Issues Developer (US Remote)

Heretto
New York, NY

Heretto, a leader in content management solutions, is looking for outstanding humans that love delivering quality products. We’re a well funded & growing startup with a big heart and giant ideas. Co…

View Details
Posted 2026-04-10

SkillBridge Manufacturing Support Technician

SkillBridge
Rochester, NY

This position is part of the DoD SkillBridge Program and is only open to active-duty service members . Civilian applicants are not eligible for SkillBridge opportunities. Non-military applic…

View Details
Posted 2026-03-07

Psychotherapist II (LMSW/LCSW)

Mindful Care
West Hempstead, NY

Mindful Care is seeking a New York state-licensed master's degree level Licensed Master Social Workers and Licensed Clinical Social Workers to provide psychotherapy, remotely. This position requi…

View Details
Posted 2026-02-24

Graduate Nurse (GPN or GN)

Harris Hill Nursing Facility LLC
Buffalo, NY

Job Description Job Description GN, or GPN – Grow with Us! | Harris Hill Nursing Facility Location: Williamsville, NY Schedule: Flexible shifts available – Full-time, Part-time, and Per D…

View Details
Posted 2026-04-11

Travel Speech Language Pathologist

Pediatric Developmental Services
Spring Valley, NY

Job Description Job Description Pediatric Developmental Services (PDS) is seeking to hire a full-time Speech Language Pathologist . Do you enjoy working with children? Would you like to improve…

View Details
Posted 2026-04-11

Algebra & Geometry Tutor (HS)

PRACTICE
Bronx, NY

Make a Difference, One Student at a Time Are you passionate about education and driven to empower young minds? Do you crave a flexible schedule that allows you to give back while pursuing your own…

View Details
Posted 2026-04-12

Senior Omni Merchandise Demand Planner

Garan, Incorporated
New York, NY

About This Opportunity: The is a full-time position based in New York City that reports into senior leadership of the childrenswear division. In conjunction with our retail partners, the candidate…

View Details
Posted 2026-03-19