Senior Security Architect

Qnity; Wilmington (DE); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Qnity in Wilmington, DE is seeking a Senior Security Architect to define secure patterns across enterprise, cloud, network, endpoint, email, manufacturing and application environments.

This hands-on architect role balances strategic design with detailed technical discussions, requiring broad knowledge in Azure, identity, SIEM, vulnerability management, and secure connectivity.

Qualifications

• Significant experience in cybersecurity architecture within a complex enterprise.
• Broad knowledge across cloud, network, endpoint, identity, vulnerability management and security operations.
• Strong understanding of Microsoft Azure and enterprise cloud security concepts.
• Experience with enterprise email security, phishing protection, and security controls.

Responsibilities

• Develop cybersecurity reference architectures, standards, and design patterns across cloud, network, endpoint, email, identity, infrastructure, and application environments.
• Define secure patterns for Azure, enterprise networking, remote access, internet egress, endpoint security, email security, application publishing, third‑party connectivity, and manufacturing environments.
• Review solution and application architectures to identify security requirements, risks, dependencies, and required controls.
• Translate cybersecurity requirements into practical designs for engineering and projects.
• Provide preferred approaches and acceptable alternatives rather than a single rigid solution.
• Develop patterns integrating security technologies including Microsoft Entra ID, Defender, Sentinel, Intune, Azure, PKI, Palo Alto Networks, vulnerability management, email security, and security operations platforms.
• Support hybrid cloud and enterprise infrastructure designs involving routing, DNS, TLS, private connectivity, segmentation, identity, endpoint controls, and application data flows.
• Develop security patterns for manufacturing and OT environments, including segmentation, remote support, privileged access, endpoint protection, and monitoring.
• Partner with project teams to identify and resolve security architecture issues early in the design process.
• Define architectural requirements for security logging, monitoring, telemetry, vulnerability management, policy ownership, access control, and operational support.
• Evaluate new technologies and cybersecurity capabilities and determine integration with broader security architecture.
• Support development of cybersecurity programs, standards, control frameworks, and engineering practices.
• Maintain architecture documentation, diagrams, reference patterns, and technical decision records.

Skills

Cybersecurity architecture

Azure security

Network security

Endpoint security

Identity and access management

Security operations

Threat & vulnerability

Diagrams and documentation

Tools

Microsoft Entra ID

Microsoft Defender

Microsoft Sentinel

Intune

Azure

PKI

Palo Alto Networks

Proofpoint

ServiceNow

FireMon

Job description

Are you looking to power the next leap in the exciting world of advanced electronics? Do you want to help solve problems that drive success in the rapidly evolving technology and connectivity landscape? Then bring your problem-solving, passion, and creativity to help us power the next leap in electronics.

At Qnity , we’re more than a global leader in materials and solutions for advanced electronics and high-tech industries – we’re a tight-knit team that is motivated by new possibilities, and always up for a challenge. All our dedicated teams contribute to making cutting-edge technology possible. We value forward-thinking challengers, boundary-pushers, and diverse perspectives across all our departments, because we know we play a critical role in the world enabling faster progress for all. Learn how you can start or jumpstart your career with us.

Qnity is seeking a Senior Security Architect to define secure, practical cybersecurity patterns across our global enterprise, cloud, network, endpoint, email, manufacturing, and application environments. Ideally, this role will be based on-site (hybrid) in Wilmington, DE. Alternatively, remote may be considered for a highly qualified candidate.

This role will partner closely with Cybersecurity Engineering, Network, Cloud, Infrastructure, Endpoint, Identity, Manufacturing IT, Cybersecurity Operations, and project teams. The architect will develop reference architectures and standards, review designs, and provide practical implementation options that balance security, reliability, cost, and delivery timelines.

This is a hands‑on architecture role requiring broad cybersecurity knowledge. The successful candidate must be comfortable moving between strategic design and detailed technical discussions involving cloud architecture, network security, endpoint controls, email security, identity, application security dependencies, logging, vulnerability management, data flows, and security operations.

Key Responsibilities

• Develop cybersecurity reference architectures, standards, and approved design patterns across cloud, network, endpoint, email, identity, infrastructure, and application environments.

• Define secure patterns for Azure, enterprise networking, remote access, internet egress, endpoint security, email security, application publishing, third‑party connectivity, and manufacturing environments.

• Review solution and application architectures to identify security requirements, risks, dependencies, and required controls.

• Translate cybersecurity requirements into practical technical designs that engineering and project teams can implement.

• Provide preferred approaches and acceptable alternatives rather than a single rigid solution.

• Develop patterns integrating security technologies including Microsoft Entra ID, Defender, Sentinel, Intune, Azure, PKI, Palo Alto Networks, vulnerability management, email security, and security operations platforms.

• Support hybrid cloud and enterprise infrastructure designs involving routing, DNS, TLS, private connectivity, segmentation, identity, endpoint controls, and application data flows.

• Develop security patterns for manufacturing and operational technology environments, including segmentation, remote support, privileged access, endpoint protection, and monitoring.

• Partner with project teams to identify and resolve security architecture issues early in the design process.

• Define architectural requirements for security logging, monitoring, telemetry, vulnerability management, policy ownership, access control, and operational support.

• Evaluate new technologies and cybersecurity capabilities and determine how they should integrate with the broader security architecture.

• Support the development and maturation of cybersecurity programs, standards, control frameworks, and engineering practices.

• Maintain clear, usable architecture documentation, diagrams, reference patterns, and technical decision records.

Required Qualifications

• Significant experience in cybersecurity architecture, security engineering, or a senior technical security role within a complex enterprise.

• Broad knowledge across multiple cybersecurity domains, including cloud security, network security, endpoint security, email security, identity and access management, vulnerability management, logging, and security operations.

• Strong understanding of Microsoft Azure and enterprise cloud security concepts.

• Strong understanding of enterprise networking concepts including routing, DNS, NAT, VPNs, proxies, TLS, segmentation, and secure connectivity.

• Experience with endpoint protection, device management, EDR, and modern endpoint security architectures.

• Familiarity with enterprise email security, phishing protection, secure email gateways, and Microsoft 365 security controls.

• Experience integrating security controls with SIEM, identity, endpoint, network, vulnerability‑management, and IT service‑management platforms.

• Ability to understand application architectures and translate business and technical requirements into secure, supportable designs.

• Experience developing reference architectures, engineering standards, control patterns, and reusable technical guidance.

• Ability to work across multiple technical disciplines without requiring deep specialization in every technology.

• Strong written, verbal, and diagramming skills.

• Demonstrated judgment in balancing security requirements with operational and project constraints.

Preferred Qualifications

• Experience in a global manufacturing or industrial environment.

• Familiarity with Purdue‑model segmentation and operational technology security.

• Experience with Microsoft Sentinel, Defender, Entra ID, Intune, Azure, Palo Alto Networks, Proofpoint, ServiceNow, FireMon, PKI, or comparable enterprise security technologies.

• Experience with Azure networking, private endpoints, ExpressRoute, Windows 365, Azure Virtual Desktop, and hybrid connectivity.

• Experience participating in or helping develop cybersecurity programs such as vulnerability management, security monitoring, endpoint security, cloud security, network security, identity security, or security architecture.

• Relevant certifications such as CISSP, CCSP, Microsoft Azure, GIAC, PCNSE, or comparable technical security certifications.

Professional Characteristics

• Broadly knowledgeable, technically credible, and comfortable working across cybersecurity disciplines.

• Able to recognize when specialist expertise is required and effectively engage the appropriate engineering teams.

• Pragmatic and comfortable challenging weak designs.

• Able to explain both what must change and how it can be implemented.

• Flexible in approach without weakening core security requirements.

• Comfortable working in a developing organization where standards, reference architectures, and operating models are still being established.

• Produces architecture that engineering and project teams can actually use.

#LI-LH1

Qnity is an equal opportunity employer. Qualified applicants will be considered without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability or any other protected class. If you need a reasonable accommodation to search or apply for a position, please visit our Accessibility Page for Contact Information (https://www.qnityelectronics.com/accessibility.html) .

Qnity offers a comprehensive pay and benefits package. To learn more visit the Compensation and Benefits page (https://careers.qnityelectronics.com/us/en/compensation-and-benefits-final) .

We use Artificial Intelligence (AI) to enhance our recruitment process.