Job Description

Cybersecurity Architect

Enterprise Security Architecture | Retail | OT/IoT | M&A

Are you a Cybersecurity Architect who enjoys solving complex security challenges across environments that go far beyond traditional corporate IT?

We’re looking for an experienced Cybersecurity Architect to join a large, complex enterprise undergoing continued technology transformation and growth. This is a high-impact opportunity to influence cybersecurity architecture across enterprise IT, retail locations, distribution and warehouse operations, OT/IoT, cloud, infrastructure, applications, and mergers & acquisitions.

This role is ideal for someone who can walk into a complex environment, quickly understand how the technology operates, identify the real cybersecurity risks, and design practical solutions that balance security, business objectives, operational availability, and technology constraints.

You won’t just review architecture diagrams or check compliance boxes. You’ll partner directly with cybersecurity, engineering, infrastructure, cloud, networking, application, operational, and business teams to help shape how technology is securely designed and implemented.

What You’ll Do

Drive Enterprise Cybersecurity Architecture

• Design and review secure architectures across cloud, on-premises infrastructure, networks, applications, identity, endpoints, and enterprise platforms.

• Conduct security architecture reviews, threat modeling, and cybersecurity risk assessments.

• Develop security architecture standards, patterns, requirements, and reference architectures.

• Translate cybersecurity risks into practical technical requirements and actionable recommendations.

• Partner with engineering and technology teams throughout the solution lifecycle to incorporate security early rather than after implementation.

• Develop architecture diagrams, security requirements, decision records, risk assessments, and remediation strategies.

Secure Complex Retail & Distributed Environments

You’ll help protect technology environments where security must coexist with availability and day-to-day business operations.

• Assess cybersecurity risks across retail networks, payment environments, point-of-sale technologies, wireless infrastructure, third-party connectivity, edge technologies, and IoT/OT devices.

• Design segmentation strategies across corporate, retail, OT, payment, guest, and other technology environments.

• Incorporate PCI DSS and applicable security requirements into architecture decisions.

• Work closely with technology and operational teams to implement security without unnecessarily disrupting business operations.

Help Shape OT & IoT Security

This role provides the opportunity to work across warehouse, industrial, refrigeration, building-management, automation, facility, and IoT/OT environments.

You’ll assess and provide architecture guidance around:

• IT/OT network segmentation

• Asset discovery and visibility

• Remote and vendor access

• Identity and privileged access

• Vulnerability management

• Security monitoring

• Legacy and unsupported technologies

• OT/IoT connectivity to enterprise networks and cloud environments

You’ll help reduce cyber risk while recognizing the unique safety, availability, reliability, lifecycle, and operational requirements associated with OT environments.

Play a Key Role in M&A

One of the most exciting aspects of this opportunity is the ability to influence cybersecurity throughout the M&A lifecycle.

You’ll help:

• Assess newly acquired technology environments.

• Identify cybersecurity risks, architecture gaps, technical debt, unsupported technologies, and control deficiencies.

• Evaluate identity, endpoints, networks, cloud, applications, data, OT/IoT, vulnerability management, privileged access, and security monitoring.

• Support Day 1 readiness and post-acquisition security integration.

• Develop risk-based cybersecurity integration and remediation roadmaps.

• Define interim security controls when immediate migration to enterprise standards isn’t practical.

• Help establish target-state security architectures.

• Communicate material risks and remediation priorities to technical teams and senior leadership.

What We’re Looking For

• 10+ years of IT/Cybersecurity experience with significant experience in Cybersecurity Architecture, Security Engineering, or Solution Security.

• Proven experience designing and assessing security architecture within large, complex enterprise environments.

• Demonstrated cybersecurity experience supporting retail, distribution, warehouse, or similarly distributed operational environments.

• Real-world experience with OT/IoT cybersecurity architecture, including IT/OT segmentation, remote/vendor access, asset visibility, monitoring, and operational risk.

• Previous cybersecurity experience supporting M&A assessments, enterprise integrations, and post-acquisition remediation.

• Strong understanding of enterprise network security, segmentation, firewalls, Zero Trust, remote access, and secure communications.

• Experience securing hybrid environments across on-premises infrastructure and public cloud.

• Strong working knowledge of IAM/PAM, endpoint security, vulnerability management, cloud security, data protection, SIEM/security monitoring, and network security.

• Experience conducting security architecture reviews, threat modeling, and risk assessments.

• Knowledge of security frameworks including NIST CSF, NIST 800-53, CIS Controls, and ISO 27001.

• Ability to develop and communicate architecture diagrams, standards, patterns, risk assessments, and remediation recommendations.

• Strong communication skills with the ability to translate complex technical findings into business, operational, financial, and reputational risk.

• Ability to influence and challenge stakeholders across a large matrixed organization without relying on direct authority.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related discipline, or equivalent professional experience.

Nice to Have

• Experience within large-scale retail, grocery, food service, distribution, supply chain, logistics, or manufacturing environments.

• Deep OT security architecture and IT/OT segmentation experience.

• Experience conducting cybersecurity assessments during M&A due diligence.

• Experience developing post-acquisition security integration plans and target-state architectures.

• PCI DSS experience.

• Knowledge of the Purdue Model, industrial protocols, and OT network architecture.

• Experience with OT/IoT asset discovery and visibility technologies.

• Experience across Zero Trust, CNAPP/CSPM, EDR/XDR, SIEM, IAM/PAM, vulnerability management, DLP, and secure remote access.

• Experience working across Cybersecurity, Infrastructure, Networking, Cloud, IAM, Applications, Risk, and business teams.

• Certifications such as CISSP, CCSP, CISM, SABSA, GIAC, GICSP, or ISA/IEC 62443.

The Technology Environment

You’ll work across a broad enterprise security ecosystem that may include:

• Cloud: Azure, AWS, hybrid cloud

• Identity: Active Directory, Microsoft Entra ID, IAM, SSO, MFA, PAM

• Network Security: Enterprise firewalls, segmentation, Zero Trust, VPN, secure remote access, wireless, data center and distributed networks

• OT/IoT: Asset discovery, industrial and warehouse technology, building management, automation, IT/OT segmentation, secure vendor access

• Application Security: Secure SDLC, threat modeling, architecture assessments

• Cloud Security: CNAPP/CSPM and cloud security governance

• Endpoint: EDR/XDR and endpoint protection

• Security Operations: SIEM, logging, monitoring, incident detection

• Vulnerability Management: Scanning, prioritization, and remediation

• Data Security: DLP, encryption, and data protection

• Retail Security: POS/payment environments, PCI DSS, wireless, and edge technologies

• Governance & Collaboration: ServiceNow, Microsoft 365, Teams, SharePoint, Power BI, Jira, Confluence, Smartsheet, and Microsoft Project

You do not need to have hands-on experience with every individual platform. We’re looking for someone who understands how these technologies work together architecturally and how to evaluate risk across complex environments.

What Success Looks Like

First 30 Days

You’ll learn the technology and cybersecurity landscape, understand current architecture standards and priorities, build relationships across key teams, and gain visibility into active retail, OT/IoT, cloud, infrastructure, and M&A initiatives.

Days 31–60

You’ll begin independently leading architecture reviews, threat modeling, and risk assessments while identifying security gaps and developing practical recommendations for remediation, interim controls, and target-state architecture.

Days 61–90

You’ll operate as a trusted Cybersecurity Architecture advisor, owning architecture recommendations across assigned initiatives and helping drive target-state architectures, segmentation strategies, security patterns, M&A integration roadmaps, and risk-based remediation priorities.

Why This Opportunity Stands Out

This isn’t a narrowly focused Cybersecurity Architect position.

You’ll have the opportunity to work at the intersection of:

Enterprise Cybersecurity Architecture + Retail + OT/IoT + Cloud + Infrastructure + M&A

You’ll influence security decisions across business-critical environments, work directly with technical and business leadership, and help shape how cybersecurity supports transformation, acquisitions, modernization, and growth.

If you’re the kind of architect who enjoys walking into a complex environment, figuring out what’s really happening, identifying the risk, and building a practical path forward, this is the type of opportunity where you can make a significant impact.

Work Model: Hybrid, with regular onsite collaboration and flexibility for additional onsite presence based on business, project, and M&A needs.