Cyber Security Architect

We work alongside the best and brightest to do incredibly cool things you wouldn't believe. At Roush, you're part of building the future. Are you someone that has a passion for providing innovated solutions to complex challenges? Do you want to work someplace where creativity and new ideas are encouraged? If so, then keep reading.We fuse technology and engineering to provide product development solutions to customers in a diverse range of industries. Widely recognized for providing engineering, testing, prototype, and manufacturing services to the transportation industry, Roush also provides significant support to the aerospace, defense, and theme park industries. With over 2,400 employees in facilities throughout the United States, Europe, Asia, and South America, our unique combination of creativity and tenacity activates big ideas on a global stage.Are you looking for a new challenge? The Cyber Security Architect I supports the design, implementation, and management of enterprise securitycontrols to protect company systems, data, and users. This role helps strengthen the organization’s securityposture by supporting Zero Trust architecture, Microsoft 365 security and compliance, endpoint security,vulnerability management, and Data Loss Prevention solutions while partnering with teams to assess risk andremediate security gaps. This is a hybrid role, based in Livonia Michigan.As a Cyber Security Architect I, you will:Support the implementation, configuration, and ongoing maintenance of security capabilities within Netskope Zero Trust architecture under the guidance of senior teammembers.Assist with the configuration, monitoring, and support of Microsoft 365 security and compliancetools, Identity and Access Management (IAM) processes, role-based access controls, least privilegepractices, and multi-factor authentication solutions.Assist with vulnerability assessments, tracking remediation activities, andcoordinating with technical teams to help address vulnerabilities based on risk andpriority.Monitor endpoint and server patching reports to help identify gaps, follow up on remediationactivities, and support efforts to improve patch compliance.Support data protection processes by assisting with security tools, reviewing alerts orreports, and helping safeguard sensitive data in accordance with privacy, security, andcompliance requirements.Review endpoint and server patching status, document identified gaps, and work with technical teams to support timely issue resolution.Collaborate with DevOps and technical teams to support security practices within the software development lifecycle, including secure coding guidance, code review support, and automatedsecurity testing activities.Assist with cyber security education efforts and simulated phishing testing, including communications,tracking, and reporting activities.Support third-party vendor security reviews by gathering documentation, assisting withsecurity assessments, and helping track compliance with security requirements.Monitor evolving security threats, vulnerabilities, and mitigation techniques to support detection,response, and remediation activities.Minimum qualifications to be considered:Bachelor’s degree in computer science, Computer Engineering, or related experience.Minimum of 3 years of hands-on experience managing Microsoft 365 security tools or comparable cloudplatforms (e.g., Vulnerability Management, EDR) with a strong focus on risk-based remediation.U.S. Citizen or U.S. Permanent Resident allowing for International Traffic in Arms Regulations (ITAR) compliance.Experience with cloud-delivered commercial and government-based solutions such as Microsoft M365-E5/Azure, Amazon Web Services and Google Cloud Platform, and experience with IT backup and disasterrecovery systems.Working knowledge of NIST CSF, 800-171, CMMC, ISO-27001, TISAX, MS-365 Security & Compliance, DLP, SIEM,EDR, Email Security, Vulnerability Management, Incident management, TCP/IP (Transmission ControlProtocol/Internet Protocol), DNS (Domain Name System), and DHCP (Dynamic Host Configuration Protocol).Knowledge of firewalls, switches, servers (Windows, LINUX) and databases.Understanding and proficiency with SAN (Storage Area Network) and NAS (Network Attached Storage), LocalArea Network (LAN) and Wide Area Network (WAN) concepts and configurations such as routing, cabling, VPN(Virtual Private Network), and ISPs (Internet Service Providers) options and capabilities.Ability to act effectively as a technical resource.Excellent communication skills including ability to interact effectively with customers, vendors, and teammembers and strong leadership and organizational skillsA successful candidate may also have:Master’s degree in business or information technology or related field.Minimum 3 years of professional experience supporting, securing, and maintaining networks, servers, and cloudenvironments.Certification(s) in information security such as Certified Information Systems Security Professional (CISSP),Certified Information Security Manager (CISM), etc.Hands-on experience designing, implementing, and operating enterprise security controls, platforms, andtooling across cloud and on-prem environmentOur full-time benefits include: medical, dental, vision, life insurance, earned sick time, STD, LTD, 401K, tuition reimbursement, paid vacation, paid holidays, andmore.If you share our passion for providing innovative solutions to complex challenges, we want you on our team.Please visit our careers page and apply by clicking on this link:/Visit our website:Like us on Facebook:Roush is an EO employer – Veterans/Disabled and other protected categoriesIf you need a reasonable accommodation for our employment application process due to disability, please contact Roush Talent Acquisition at .#LI-DNI#JTSummaryLocation: Livonia, MI, United StatesType: Full TimeExperience: Entry LevelDepartment: Information Technology - 8018