Senior Configuration Management Security Architect – CIS Benchmarks & Compliance Automation

Axiom Path•Charlotte, NC

19d

About The Position

Join a global financial services organization focused on strengthening enterprise cybersecurity, improving operational resilience, and advancing security engineering through automation and standardized controls in a highly regulated environment. This role is part of an enterprise Engineering & Automation transformation initiative to modernize endpoint security, establish consistent configuration standards, and reduce manual compliance processes. The team works across North America, Europe, and Asia-Pacific with security architects, engineers, technology operations, risk and compliance specialists, and business stakeholders. The role leads enterprise secure configuration standards aligned with CIS Benchmarks and cybersecurity frameworks, improves configuration management architecture, and develops automated compliance validation and policy-as-code capabilities. It also supports configuration drift detection, exception and remediation management, audit readiness, security tool rationalization, and sustainable operational adoption. The opportunity is described as remote in the United States in the latest requisition comments, while the formal posting also lists hybrid; the final arrangement requires confirmation. Engagement is W2 only, with no C2C/1099.

Requirements

5–7 years of relevant experience in cybersecurity architecture, security engineering, configuration management, or related enterprise security disciplines.
Strong hands-on experience implementing secure configuration standards and security hardening practices across enterprise technology environments.
Expertise with CIS Benchmarks, including assessing configuration compliance, identifying gaps, and implementing remediation strategies.
Experience designing or supporting automated security compliance validation and configuration monitoring capabilities.
Knowledge of policy-as-code principles and automated security control enforcement.
Strong understanding of configuration drift detection, exception management, security remediation, and ongoing control validation.
Experience supporting security governance, risk management, regulatory compliance, and internal audit requirements.
Ability to develop technical security standards, implementation guidance, and audit-supporting documentation.
Experience evaluating security tools and identifying opportunities to simplify, consolidate, or improve enterprise security capabilities.
Understanding of cybersecurity architecture principles and integration of security controls into enterprise technology operations.
Strong analytical and problem-solving skills, including the ability to translate security requirements into practical technical solutions.
Excellent communication and stakeholder management skills across engineering, operations, security, and compliance teams.
Ability to independently manage technical initiatives, influence decisions, and drive measurable security improvements across geographically distributed teams.

Responsibilities

Lead development and implementation of enterprise secure configuration standards aligned with CIS Benchmarks and established cybersecurity frameworks.
Design and improve configuration management architecture across endpoints and enterprise technology environments.
Develop and implement automated compliance validation to identify configuration deviations, security gaps, and policy violations.
Advance policy-as-code practices to improve consistent, repeatable, scalable security configuration enforcement.
Establish processes for detecting configuration drift, evaluating exceptions, tracking remediation, and maintaining ongoing compliance.
Collaborate with security engineering and technology operations to integrate secure configuration requirements into existing workflows.
Develop compliance evidence, control documentation, and reporting capabilities to support internal audit and regulatory expectations.
Evaluate security and configuration management tools, identify overlapping capabilities, and support technology rationalization.
Partner with cybersecurity, risk, compliance, procurement, finance, and technology stakeholders to align technical improvements with enterprise governance requirements.
Drive initiatives from assessment and architectural recommendations through implementation, validation, documentation, and sustainable operational adoption.