Security Architect and ZeroTrust Solution Engineer

The Estée Lauder Companies Inc.; New York (NY); On-site; USD 150,000 - 190,000; Full time

Job summary

The Estée Lauder Companies Inc. in New York seeks a Lead Cybersecurity Architect and Zero Trust solution Engineer to drive Illumio rollout across data centers, cloud and OT, providing architectural leadership and hands-on implementation.

You will define segmentation strategy, enforce zones, integrate with CMDB/SIEM/SOAR, mentor engineers, and partner with IT to implement disaster recovery and risk-based controls, shaping the company’s secure workload posture.

Qualifications

• Bachelor’s degree in computer science, Information Security, or related field.
• 7+ years of experience in cybersecurity architecture or engineering in enterprise or hybrid environments.
• 3+ years hands-on with Illumio Core/Edge, including policy design and segmentation strategy.
• Strong understanding of Zero Trust Architecture (ZTA) and lateral movement defense.
• Experience in network and cloud architecture (Azure, AWS, GCP) and containerized environments (Kubernetes, Docker).
• Proficient in Excel, PowerPoint and Power BI reporting.

Responsibilities

• Lead architecture design and implementation of Illumio microsegmentation and Zero Trust controls across data centers, cloud, and OT.
• Develop enterprise security architecture blueprints defining segmentation strategy and secure communication paths.
• Integrate Illumio with CMDB, SIEM, SOAR, and vulnerability tools.
• Provide architectural governance and design reviews for Zero Trust adoption.
• Collaborate with infrastructure, cloud, and app teams to design secure workload architectures and guardrails.
• Create architecture standards, reference designs, and policy frameworks for segmentation and access.
• Assess threats and technologies, recommending improvements for visibility and containment.
• Support risk assessments and compliance initiatives for network/workload segmentation.
• Mentor security engineers and share Illumio architecture and enforcement best practices.
• Develop relationships with vendors and service providers to meet organizational needs.
• Partner with IT teams to ensure disaster recovery policies are implemented.

Skills

Illio Core/Edge

Zero Trust Architecture

Cloud architecture

Kubernetes

Docker

Excel

PowerPoint

Power BI

Education

Bachelor's degree in computer science or related field

Job description

Description

As the Lead, Cybersecurity Architect and Zero Trust solution Engineer within ECR’s Cybersecurity Architecture, Technology & Solutions team, you will serve as the

• Lead architecture design and implementation- of Illumio microsegmentation and Zero Trust network controls across data centers, cloud, and OT environments.
• Develop enterprise security architecture blueprints- that define segmentation strategy, enforcement zones, and secure communication pathways.
• Integrate Illumio with security ecosystems — including CMDB, SIEM, SOAR, and vulnerability management tools.
• Provide architectural governance- and design reviews to ensure consistent adoption of Zero Trust principles.
• Collaborate with infrastructure, cloud, and application teams- to design secure workload architectures and define security guardrails.
• Create architecture standards, reference designs, and policy frameworks- for segmentation and secure access.
• Assess emerging threats and technologies-, recommending architectural improvements that enhance visibility and containment.
• Support risk assessments, compliance initiatives- and technology evaluations for network and workload segmentation.
• Mentor security engineers- and drive knowledge sharing around Illumio architecture, enforcement best practices, and operational handoffs.
• Developing and managing productive working relationships with vendors, business partners, and service providers to ensure they meet the needs of the organization.
• Partnering with IT teams to ensure disaster recovery policies and procedures are effectively implemented.

Description

As the Lead, Cybersecurity Architect and Zero Trust solution Engineer within ECR’s Cybersecurity Architecture, Technology & Solutions team, you will serve as the primary technical lead and subject-matter expert for Illumio rollout, responsible for architecture design, implementation oversight, and operational integration within the broader Zero Trust framework. This role combines architectural leadership with hands-on execution, ensuring segmentation strategy translates into measurable protection outcomes across servers, cloud workloads, endpoints, and OT environments. You will play a key role in leading tasks including, but not limited to, the following.

• Lead architecture design and implementation- of Illumio microsegmentation and Zero Trust network controls across data centers, cloud, and OT environments.
• Develop enterprise security architecture blueprints- that define segmentation strategy, enforcement zones, and secure communication pathways.
• Integrate Illumio with security ecosystems — including CMDB, SIEM, SOAR, and vulnerability management tools.
• Provide architectural governance- and design reviews to ensure consistent adoption of Zero Trust principles.
• Collaborate with infrastructure, cloud, and application teams- to design secure workload architectures and define security guardrails.
• Create architecture standards, reference designs, and policy frameworks- for segmentation and secure access.
• Assess emerging threats and technologies-, recommending architectural improvements that enhance visibility and containment.
• Support risk assessments, compliance initiatives- and technology evaluations for network and workload segmentation.
• Mentor security engineers- and drive knowledge sharing around Illumio architecture, enforcement best practices, and operational handoffs.
• Developing and managing productive working relationships with vendors, business partners, and service providers to ensure they meet the needs of the organization.
• Partnering with IT teams to ensure disaster recovery policies and procedures are effectively implemented.

You Will Be Responsible For

• Partner with ECR team members, IT stakeholders, and business owners to bring down the risk of technology to the company by identifying and evaluating technology and cyber risks as they are identified
• Responsible for reviewing risks through triage and evaluative score risk level and severity with a focus on defining a potential path for remediation
• Collaborate to define appropriate solutions to mitigate or remediate the risk by partnering with key stakeholders
• Enable balanced risk decisions by providing recommendations, escalating based on severity and risk level to ensure appropriate cyber protection capabilities and resiliency are built into the plans.
• Maintain basic project management documentation tracking project tasks, status, ownership, issue closure, and timelines.
• Coordinate and support cross-functional project teams to track overall remediation status while coordinating with applicable team and Program Managers.
• Prepare and provide reporting and dashboard status(s) on a scheduled basis to include Risk Reduction Governance Meetings.
• Develops and delivers risk reports including vulnerabilities and threats
• Partners with the appropriate ECR leadership in data reporting to drive remediation of vulnerabilities oversight, ensuring appropriate risk escalation and reporting

Qualifications

• Bachelor’s degree in computer science, Information Security, or related field
• 7+ years of experience in cybersecurity architecture or engineering, with a focus on enterprise or hybrid environments.
• 3+ years of hands-on experience with Illumio Core and/or Edge, including policy design, PCE/VEN management, and segmentation strategy.
• Strong understanding of Zero Trust Architecture (ZTA) and lateral movement defense techniques.
• Experience in network and cloud architecture (Azure, AWS, GCP) and containerized environments (Kubernetes, Docker).
• Proficient in Excel, PowerPoint and Power BI Reporting.

Required Education

• You have an undergraduate degree in technology or equivalent professional experience

Certifications (Preferred)

• Illumio Certified Technical Specialist (ICTS) or equivalent.
• CISSP, CCSP, or GIAC (e.g., GDSA, GRID).
• Cloud security certifications (Azure/AWS Security Specialty).
• NIST Zero Trust or SABSA/TOGAF certification a plus.

Technical Requirements

• Deep understanding of TCP/IP, routing, firewalls, DNS, and access control.
• Experience designing Zero Trust enforcement policies and segmentation models (role-based, app-based, and zone-based).
• Hands-on exposure to Illumio integrations (SIEM, SOAR, CMDB, EDR, or vulnerability tools).
• Familiarity with identity-centric architectures, Zero Trust Network Access (ZTNA), and microsegmentation alternatives (Cisco Secure Workload, Guardicore, etc.).
• Strong skills in automation and scripting (Python, REST APIs, PowerShell).
• Ability to map complex application dependencies for segmentation and risk prioritization.

• Problem-Solving and Proactivity: Ability to identify opportunities for improvement and assist in the implementation of solutions. Initiative and autonomy in supporting ECR’s strategic and operational goals.
• Cybersecurity Knowledge: Cybersecurity skills include exposure to multiple cybersecurity domains e.g. cybersecurity architecture, engineering, operations, IDAM.
• Expertise in cybersecurity attacks and controls and how one works against the other. Experience with industry cybersecurity best practices and domains, with a constant willingness to learn more.
• Leadership Experience
• A Natural Leader and Results-Driven Lead: You inspire and guide collaborative team with a clear vision, setting goals that align with organizational objectives.
• An Effective Communicator and Change Champion: You foster open communication within team, making informed decisions and lead your projects and goals through change with adaptability and resilience.
• Performance Management & Development: You have demonstrated success in managing your performance across key projects/programs.
• Analytical Thinking: You possess strong analytical skills to assess and address complex challenges.
• Attention to Detail: You demonstrate meticulous attention to detail in designing and implementing secure processes.
• Collaboration / Relationship Building: You thrive in a highly collaborative environment, building strong partnerships with various stakeholders and cross-functional partners.