Endpoint Security Architect

Southern Company; Birmingham (AL); On-site; USD 140,000 - 170,000; Full time

Job summary

Southern Company is seeking an Endpoint Security Architect to lead enterprise endpoint security architecture across workstations, servers, mobile devices, and emerging endpoints. This role partners with Cybersecurity Operations and Infrastructure to reduce risk and align with enterprise standards.

You will define the strategy, roadmap, and governance for endpoint security, guiding technology choices, and ensuring alignment with regulatory requirements and business objectives.

Qualifications

• 7+ years in cybersecurity or related technology disciplines.
• 3+ years designing, governing, or providing architectural leadership for enterprise cybersecurity solutions.
• Experience defining security standards, architecture patterns, control requirements, reference architectures, and technology roadmaps for enterprise environments.
• Strong knowledge of endpoint security architectures, including EPP, CrowdStrike Falcon EDR, endpoint hardening, device management, mobile security, and enterprise endpoint visibility.
• Experience conducting security architecture reviews, risk assessments, and control evaluations to identify risks, gaps, and mitigation strategies.
• Working knowledge of Windows, Linux, mobile operating systems, endpoint management platforms, and enterprise security controls.
• Ability to translate complex security concepts into business, risk, and investment recommendations for technical, executive, and cross-functional audiences.

Responsibilities

• Serve as the technical authority and primary SME for enterprise endpoint security architecture, defining standards and reference architectures.
• Define and maintain the endpoint security strategy and multi-year roadmap across endpoints.
• Partner with cybersecurity operations, infrastructure, cloud security, and stakeholders to design endpoint security solutions that reduce risk.
• Guide architecture through implementation and operational transition while aligning with designs and roadmaps.
• Lead evaluation and adoption of endpoint security technologies (EPP, EDR, mobile security, device management, AI-enabled controls).
• Conduct architecture reviews and security assessments of endpoint technologies to identify risks and gaps.
• Establish baselines, maturity measures, and success criteria to evaluate endpoint security effectiveness.
• Develop business cases, technology recommendations, and executive presentations communicating security value and ROI.
• Monitor threats, regulatory changes, and industry trends to improve endpoint visibility and response.
• Define endpoint security controls for AI-enabled technologies in partnership with Cloud Security and AI Governance.

Skills

Endpoint security

Architecture leadership

Security standards

Roadmaps

Risk assessment

Cross-functional leadership

Regulatory awareness

Windows/Linux

Tools

CrowdStrike Falcon

Microsoft Defender

Microsoft Intune

Job description

Cybersecurity – Enterprise Cybersecurity Engineering – Endpoint Security Architect

Location: This is an in-office position - 4 days onsite based at GPC HQ in Atlanta, GA, or APC HQ in Birmingham, AL.

Candidates must reside within commuting distance of the designated work location. Up to 20% travel.

Southern Company is seeking an Endpoint Security Architect to lead enterprise endpoint security architecture. This position defines the strategic vision, technology roadmap, and governance standards for endpoint security across workstations, servers, mobile devices, and emerging endpoint technologies.

In this role, you will partner with Cybersecurity Operations, Cybersecurity Architecture, Infrastructure, Cloud Security, and business stakeholders to design endpoint security solutions that reduce risk, enable business objectives, guide technology decisions, and align with enterprise architecture standards, regulatory requirements, and evolving threats.

Job Responsibilities

• Serve as the technical authority and primary subject matter expert for enterprise endpoint security architecture, defining standards, reference architectures, design patterns, and security requirements while providing architectural leadership for strategic initiatives, enterprise deployments, modernization efforts, mergers and acquisitions, and other work impacting endpoint security.
• Define and maintain the endpoint security strategy and multi-year roadmap across workstations, servers, mobile devices, and emerging endpoint technologies.
• Partner with Cybersecurity Operations, Infrastructure, Cloud Security Architecture, AI Governance, and business stakeholders to design endpoint security solutions that reduce risk and enable technology innovation.
• Guide strategic initiatives from architecture through implementation and operational transition, ensuring delivered solutions remain aligned with approved designs, security requirements, and roadmap outcomes.
• Lead evaluation, proof-of-concept, selection, and adoption of endpoint security technologies, including Endpoint Protection Platforms (EPP), Endpoint Detection and Response (EDR), mobile security, endpoint hardening, device management, AI-enabled controls, and emerging security capabilities.
• Conduct architecture reviews and security assessments of endpoint-related technologies, platforms, and projects to identify risks, control gaps, and opportunities for improvement.
• Establish baselines, maturity measures, strategic metrics, and success criteria to evaluate endpoint security effectiveness and support risk-informed decisions.
• Develop business cases, technology recommendations, and executive-level presentations that communicate security value, investment needs, roadmap priorities, and risk reduction outcomes.
• Monitor emerging threats, regulatory requirements, industry trends, and technology advancements to improve endpoint visibility, resilience, detection, response, and efficiency.
• Define endpoint security controls for AI-enabled technologies, endpoint-based AI workloads, copilots, automation platforms, and emerging agentic technologies in partnership with Cloud Security Architecture and AI Governance stakeholders.

Job Qualifications

Minimum

• 7+ years of experience in cybersecurity, information security, infrastructure security, endpoint security, or related technology disciplines.
• 3+ years of experience designing, governing, or providing architectural leadership for enterprise cybersecurity solutions.
• Demonstrated experience defining security standards, architecture patterns, control requirements, reference architectures, and technology roadmaps for enterprise environments.
• Strong knowledge of endpoint security architectures, including EPP, CrowdStrike Falcon EDR, endpoint hardening, device management, mobile security, and enterprise endpoint visibility.
• Experience conducting security architecture reviews, risk assessments, and control evaluations to identify risks, gaps, and mitigation strategies.
• Working knowledge of Windows, Linux, mobile operating systems, endpoint management platforms, and enterprise security controls.
• Experience evaluating security technologies, developing recommendations, and influencing adoption decisions across cybersecurity, infrastructure, cloud, and business teams.
• Ability to translate complex security concepts into business, risk, and investment recommendations for technical, executive, and cross-functional audiences.

Preferred

• Experience serving as a cybersecurity architect, solution architect, security engineering lead, or equivalent strategic security role.
• Experience developing cybersecurity roadmaps, business cases, maturity models, strategic metrics, and executive-level technology recommendations.
• Experience supporting endpoint security programs in large environments, including environments with 10,000+ endpoints.
• Experience with Microsoft Defender, Microsoft Intune, mobile device management, mobile threat defense, or equivalent enterprise endpoint security platforms.
• Experience evaluating AI-enabled security capabilities, endpoint protections for AI applications, automation platforms, copilots, or emerging agentic technologies.
• Experience integrating endpoint security controls with cloud security, identity, Zero Trust, vulnerability management, and security operations capabilities.
• Experience supporting cybersecurity architecture initiatives in regulated, critical infrastructure, energy, utility, or large enterprise environments.
• Relevant professional certifications preferred, such as CISSP, CISM, CCSP, SABSA, TOGAF, GIAC, Microsoft, CrowdStrike, or cloud security certifications.

Additional Information

• This position falls under the company’s Insider Threat Program and will have access to, and control over sensitive data, systems or assets. Enhanced personnel screening, which includes a background review, drug screen and psychological assessment, will be required if you are selected for this position.

About Southern Company

Southern Company (NYSE: SO ) is a leading energy provider serving 9 million customers across the Southeast and beyond through its family of companies. Providing clean, safe, reliable and affordable energy with excellent service is our mission. The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy solutions provider with national capabilities, a fiber optics network and telecommunications services. Through an industry-leading commitment to innovation, resilience and sustainability, we are taking action to meet customers' and communities' needs while advancing our goal of net-zero greenhouse gas emissions by 2050. Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success. We are transforming energy into economic, environmental and social progress for tomorrow. Our corporate culture has been recognized by a variety of organizations, earning the company awards and recognitions that reflect Our Values and dedication to service. To learn more, visit www.southerncompany.com .

Southern Company invests in the well-being of its employees and their families through a comprehensive total rewards strategy that includes competitive base salary, annual incentive awards for eligible employees and health, welfare and retirement benefits designed to support physical, financial, and emotional/social well-being. This position may also be eligible for additional compensation, such as an incentive program, with the amount of any bonus/awards subject to the terms and conditions of the applicable incentive plan(s). A summary of the benefits offered for this position can be found here https://seo.nlx.org/southernco/pdf/SOCO-Benefits.pdf . Additional and specific details about total compensation and benefits will also be provided during the hiring process.

Southern Company is an equal opportunity employer where an applicant's qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.

Job Identification: 21937

Job Category: Cybersecurity

Job Schedule: Full time

Company: Southern Company Services