Senior Configuration Management Security Architect – CIS Benchmarks & Compliance Automation

Axiom Path, Inc.; Florida; Hybrid; USD 140,000 - 170,000; Full time

Job summary

Axiom Path, Inc. in the United States is seeking a Senior Configuration Management Security Architect to drive CIS Benchmark alignment and automate compliance across enterprise endpoints.

You will lead architecture, governance, and cross-functional collaboration across security, operations, and risk teams. The role emphasizes policy-as-code, drift detection, and scalable security controls within a highly regulated, global financial services context.

Qualifications

• 5–7 years of relevant experience in cybersecurity architecture, security engineering, configuration management, or related enterprise security disciplines.
• Strong hands-on experience implementing secure configuration standards and security hardening practices across enterprise environments.
• Demonstrated expertise with CIS Benchmarks, including assessing configuration compliance, identifying gaps, and remediation strategies.
• Experience designing or supporting automated security compliance validation and configuration monitoring capabilities.
• Knowledge of policy-as-code principles and automated security control enforcement.
• Strong understanding of configuration drift detection, exception management, security remediation, and ongoing control validation.
• Experience supporting security governance, risk management, regulatory compliance, and internal audit requirements.
• Ability to develop technical security standards, implementation guidance, and audit-supporting documentation.

Responsibilities

• Lead the development and implementation of enterprise secure configuration standards aligned with CIS Benchmarks and cybersecurity frameworks.
• Design and improve configuration management architecture to strengthen security consistency across endpoints and enterprise environments.
• Develop and implement automated compliance validation processes that identify configuration deviations, security gaps, and policy violations.
• Advance policy-as-code practices to improve consistency, repeatability, and scalability of security configuration enforcement.
• Establish processes for detecting configuration drift, evaluating exceptions, tracking remediation activities, and maintaining ongoing compliance.
• Collaborate with security engineering and technology operations teams to integrate secure configuration requirements into existing operational workflows.
• Strengthen audit readiness by developing reliable compliance evidence, control documentation, and reporting capabilities that support internal audit and regulatory expectations.
• Evaluate existing security and configuration management tools, identify overlapping capabilities, and support technology rationalization initiatives.
• Partner with cybersecurity, risk, compliance, procurement, finance, and technology stakeholders to align technical security improvements with enterprise governance requirements.
• Drive initiatives from initial assessment and architectural recommendations through implementation, validation, documentation, and sustainable operational adoption.

Skills

CIS Benchmarks

Configuration management

Automated compliance

Policy-as-code

Audit readiness

Security architecture

Stakeholder management

Cross-functional collaboration

Security tooling evaluation

Security governance

Job description

Senior Configuration Management Security Architect – CIS Benchmarks & Compliance Automation

Charlotte, United States | Posted on 10/21/2026

Job Description

Be Part Of A High-Performing Team

Join a global financial services organization committed to strengthening enterprise cybersecurity, improving operational resilience, and advancing security engineering through automation and standardized controls. The organization operates in a highly regulated environment where consistent security configurations, risk management, and audit readiness are critical to protecting technology infrastructure and supporting business operations.

This opportunity sits within an enterprise Engineering & Automation transformation initiative focused on modernizing endpoint security, establishing consistent configuration standards, and reducing manual compliance processes. The team collaborates across North America, Europe, and Asia-Pacific, bringing together security architects, engineers, technology operations, risk and compliance specialists, and business stakeholders to implement sustainable security improvements.

What's In Store For You

• Remote opportunity – United States only , as specified in the latest requisition comments. The formal posting also lists hybrid, so the final work arrangement requires confirmation.
• Engagement: W2 only (no C2C/1099).
• Contribute to a global cybersecurity transformation initiative focused on enterprise configuration management and automated compliance.
• Work across cybersecurity architecture, engineering, governance, risk management, and technology operations.
• Help establish scalable security standards and automation capabilities across a complex international technology environment.
• Participate in initiatives involving security tool consolidation, continuous compliance monitoring, and operational security improvements.

How You Will Make An Impact

• Lead the development and implementation of enterprise secure configuration standards aligned with CIS Benchmarks and established cybersecurity frameworks.
• Design and improve configuration management architecture to strengthen security consistency across endpoints and enterprise technology environments.
• Develop and implement automated compliance validation processes that identify configuration deviations, security gaps, and policy violations.
• Advance policy-as-code practices to improve the consistency, repeatability, and scalability of security configuration enforcement.
• Establish processes for detecting configuration drift, evaluating exceptions, tracking remediation activities, and maintaining ongoing compliance.
• Collaborate with security engineering and technology operations teams to integrate secure configuration requirements into existing operational workflows.
• Strengthen audit readiness by developing reliable compliance evidence, control documentation, and reporting capabilities that support internal audit and regulatory expectations.
• Evaluate existing security and configuration management tools, identify overlapping capabilities, and support technology rationalization initiatives.
• Partner with cybersecurity, risk, compliance, procurement, finance, and technology stakeholders to align technical security improvements with enterprise governance requirements.
• Drive initiatives from initial assessment and architectural recommendations through implementation, validation, documentation, and sustainable operational adoption.

Requirements

Do You Bring Proven Success in Enterprise Security Configuration Management and Compliance Automation?

• 5–7 years of relevant experience in cybersecurity architecture, security engineering, configuration management, or related enterprise security disciplines.
• Strong hands-on experience implementing secure configuration standards and security hardening practices across enterprise technology environments.
• Demonstrated expertise with CIS Benchmarks , including assessing configuration compliance, identifying gaps, and implementing remediation strategies.
• Experience designing or supporting automated security compliance validation and configuration monitoring capabilities.
• Knowledge of policy-as-code principles and automated security control enforcement.
• Strong understanding of configuration drift detection, exception management, security remediation, and ongoing control validation.
• Experience supporting security governance, risk management, regulatory compliance, and internal audit requirements.
• Ability to develop technical security standards, implementation guidance, and audit-supporting documentation.
• Experience evaluating security tools and identifying opportunities to simplify, consolidate, or improve enterprise security capabilities.
• Understanding of cybersecurity architecture principles and the integration of security controls into enterprise technology operations.
• Strong analytical and problem-solving skills with the ability to translate security requirements into practical technical solutions.
• Excellent communication and stakeholder management skills, particularly when coordinating across engineering, operations, security, and compliance teams.
• Ability to independently manage technical initiatives, influence decisions, and drive measurable security improvements across geographically distributed teams.