Endpoint Cybersecurity Architect

Xylem•Charlotte, NC

About The Position

Xylem is a Fortune 500 global water solutions company dedicated to advancing sustainable impact and empowering the people who make water work every day. As a leading water technology company with 23,000 employees operating in over 150 countries, Xylem is at the forefront of addressing the world's most critical water challenges. We invite passionate individuals to join our team, dedicated to exceeding customer expectations through innovative and sustainable solutions. THE ROLE: Xylem is seeking Endpoint Cybersecurity Architect to design, implement, and manage endpoint security solutions across our enterprise. This role will play a critical part in protecting our organization from cyber threats by ensuring the security, compliance, and resilience of endpoint devices including workstations, servers, mobile devices, and other network-connected assets. In addition to endpoint security across the various platforms, this position will also be responsible for PKI, DLP, and insider threat strategies. This position will report directly to Xylem’s Director of Cybersecurity Architecture & Engineering. The position will require collaboration with IT infrastructure, cyber defense, security compliance, product security, software development and other internal functional groups (Legal, Procurement, and Finance) to ensure that the strategy and execution elements of Global Cybersecurity meets the need of Xylem.

Requirements

Bachelor's degree in computer science, Cybersecurity, Information Technology, or a related field (or equivalent work experience).
Minimum 10+ years of increasingly diverse and complex experience in field of Cybersecurity within a global environment, with at least a minimum 5+ years of experience focusing on endpoint security architecture and engineering.
Strong knowledge of endpoint security technologies, including EDR/XDR, SIEM, next‑gen AV (CrowdStrike, Microsoft Defender ATP, SentinelOne, Carbon Black), and DLP, PKI, and Insider Threat controls.
Hands-on experience with endpoint hardening, policy enforcement, and security configuration management through Group Policy, InTune and other endpoint control mechanisms for both windows and Mac.
Knowledge of scripting and automation (e.g., Python, PowerShell, Bash) for security operations.
Familiarity with security frameworks and compliance requirements (NIST, CIS, MITRE ATT&CK, ISO 27001, HIPAA, GDPR, etc.).
Experience with zero-trust security models and identity-based security controls.
Strong analytical and problem-solving skills with the ability to work independently and collaboratively.
Excellent communication and documentation skills.

Nice To Haves

Industry certifications such as CISSP, CISM, CEH, GIAC (GCIH, GCED, GSEC), or Microsoft Security certifications.
Experience working in cloud security environments (AWS, Azure, Google Cloud) with a focus on endpoint protection.
Knowledge of Mobile Device Management (MDM) and security solutions (Intune, JAMF, Workspace ONE).
Master’s Degree in Cybersecurity

Responsibilities

Architect, design, and implement endpoint security solutions to protect against malware, ransomware, phishing, and advanced persistent threats (APTs).
Develop business cases, high level design documents, security standards, policies, and best practices for endpoint security, PKI, DLP, and Insider Threat.
Participate in the evaluation, deployment, and management of endpoint detection and response (EDR), antivirus, and other endpoint security tools.
Perform threat modeling and risk assessments to identify potential vulnerabilities and recommend security enhancements.
Collaborate with IT, security operations, and risk management teams to ensure security measures are integrated into the enterprise infrastructure.
Monitor emerging security threats and industry trends to enhance endpoint security strategies.
Ensure compliance with relevant security frameworks and regulatory requirements (e.g., NIST, CIS, ISO 27001, HIPAA, GDPR).
Provide technical guidance and mentorship to junior security engineers and IT staff.
Contribute to the development and evolution of application, platforms, cloud services and infrastructure security reference and target architectures.
Participate in Mergers, Acquisitions, and Divestiture engagements as needed for secure endpoint migration and due diligence.
Prepare monthly metrics reports showing current state and advances made in Cybersecurity.