Security Architect and ZeroTrust Solution Engineer

Estée Lauder Companies; New York (NY); On-site; USD 140,000 - 180,000; Full time

Job summary

Estée Lauder Companies is seeking a Lead Cybersecurity Architect in New York, NY to lead the Illumio rollout and serve as a technical expert. This role involves architecture design and implementation oversight within the Zero Trust framework, ensuring effective segmentation strategies across various environments.

The ideal candidate will have over 7 years in cybersecurity architecture and hands-on experience with Illumio and Zero Trust principles. Strong collaboration skills and the ability to mentor are essential.

Qualifications

• 7+ years of experience in cybersecurity architecture or engineering in enterprise environments.
• 3+ years hands-on with Illumio, policy design, PCE/VEN management.
• Strong understanding of Zero Trust Architecture and lateral movement defense.

Responsibilities

• Lead architecture design of Illumio microsegmentation and Zero Trust network controls.
• Develop enterprise security architecture blueprints.
• Collaborate with teams to design secure workload architectures.

Skills

Cybersecurity architecture

Hands-on experience with Illumio Core and/or Edge

Zero Trust Architecture understanding

Network and cloud architecture experience

Strong skills in automation and scripting

Education

Bachelor's degree in computer science or Information Security

Tools

Illumio

Azure

AWS

Kubernetes

Docker

Job description

Description

As the Lead, Cybersecurity Architect and Zero Trust solution Engineer within ECR’s Cybersecurity Architecture, Technology & Solutions team, you will serve as the primary technical lead and subject‑matter expert for Illumio rollout, responsible for architecture design, implementation oversight, and operational integration within the broader Zero Trust framework. This role combines architectural leadership with hands‑on execution, ensuring segmentation strategy translates into measurable protection outcomes across servers, cloud workloads, endpoints, and OT environments. You will play a key role in leading tasks including, but not limited to, the following.

Responsibilities

• Lead architecture design and implementation of Illumio microsegmentation and Zero Trust network controls across data centers, cloud, and OT environments.
• Develop enterprise security architecture blueprints that define segmentation strategy, enforcement zones, and secure communication pathways.
• Integrate Illumio with security ecosystems — including CMDB, SIEM, SOAR, and vulnerability management tools.
• Provide architectural governance‑and design reviews to ensure consistent adoption of Zero Trust principles.
• Collaborate with infrastructure, cloud, and application teams to design secure workload architectures and define security guardrails.
• Create architecture standards, reference designs, and policy frameworks for segmentation and secure access.
• Assess emerging threats and technologies, recommending architectural improvements that enhance visibility and containment.
• Support risk assessments, compliance initiatives, and technology evaluations for network and workload segmentation.
• Mentor security engineers and drive knowledge sharing around Illumio architecture, enforcement best practices, and operational handoffs.
• Developing and managing productive working relationships with vendors, business partners, and service providers to ensure they meet the needs of the organization.
• Partnering with IT teams to ensure disaster recovery policies and procedures are effectively implemented.
• Partner with ECR team members, IT stakeholders, and business owners to bring down the risk of technology to the company by identifying and evaluating technology and cyber risks as they are identified.
• Responsible for reviewing risks through triage and evaluative score risk level and severity with a focus on defining a potential path for remediation.
• Collaborate to define appropriate solutions to mitigate or remediate the risk by partnering with key stakeholders.
• Enable balanced risk decisions by providing recommendations, escalating based on severity and risk level to ensure appropriate cyber protection capabilities and resiliency are built into the plans.
• Maintain basic project management documentation tracking project tasks, status, ownership, issue closure, and timelines.
• Coordinate and support cross‑functional project teams to track overall remediation status while coordinating with applicable team and Program Managers.
• Prepare and provide reporting and dashboard status on a scheduled basis to include Risk Reduction Governance Meetings.
• Develops and delivers risk reports including vulnerabilities and threats.
• Partners with the appropriate ECR leadership in data reporting to drive remediation of vulnerabilities oversight, ensuring appropriate risk escalation and reporting.

Qualifications

• Bachelor’s degree in computer science, Information Security, or related field.
• 7+ years of experience in cybersecurity architecture or engineering, with a focus on enterprise or hybrid environments.
• 3+ years of hands‑on experience with Illumio Core and/or Edge, including policy design, PCE/VEN management, and segmentation strategy.
• Strong understanding of Zero Trust Architecture (ZTA) and lateral movement defense techniques.
• Experience in network and cloud architecture (Azure, AWS, GCP) and containerized environments (Kubernetes, Docker).
• Proficient in Excel, PowerPoint and Power BI Reporting.

Required Education

• You have an undergraduate degree in technology or equivalent professional experience.

Certifications (Preferred)

• Illumio Certified Technical Specialist (ICTS) or equivalent.
• CISSP, CCSP, or GIAC (e.g., GDSA, GRID).
• Cloud security certifications (Azure/AWS Security Specialty).
• NIST Zero Trust or SABSA/TOGAF certification a plus.

Technical Requirements

• Deep understanding of TCP/IP, routing, firewalls, DNS, and access control.
• Experience designing Zero Trust enforcement policies and segmentation models (role-based, app-based, and zone-based).
• Hands‑on exposure to Illumio integrations (SIEM, SOAR, CMDB, EDR, or vulnerability tools).
• Familiarity with identity-centric architectures, Zero Trust Network Access (ZTNA), and microsegmentation alternatives (Cisco Secure Workload, Guardicore, etc.).
• Strong skills in automation and scripting (Python, REST APIs, PowerShell).
• Ability to map complex application dependencies for segmentation and risk prioritization.
• Problem‑Solving and Proactivity: Ability to identify opportunities for improvement and assist in the implementation of solutions. Initiative and autonomy in supporting ECR’s strategic and operational goals.
• Cybersecurity Knowledge: Cybersecurity skills include exposure to multiple cybersecurity domains e.g. cybersecurity architecture, engineering, operations, IDAM.
• Expertise in cybersecurity attacks and controls and how one works against the other. Experience with industry cybersecurity best practices and domains, with a constant willingness to learn more.

Leadership Experience

• A Natural Leader and Results‑Driven Lead: You inspire and guide collaborative team with a clear vision, setting goals that align with organizational objectives.
• An Effective Communicator and Change Champion: You foster open communication within team, making informed decisions and lead your projects and goals through change with adaptability and resilience.
• Performance Management & Development: You have demonstrated success in managing your performance across key projects/programs.
• Analytical Thinking: You possess strong analytical skills to assess and address complex challenges.
• Attention to Detail: You demonstrate meticulous attention to detail in designing and implementing secure processes.
• Collaboration / Relationship Building: You thrive in a highly collaborative environment, building strong partnerships with various stakeholders and cross‑functional partners.