Endpoint Cybersecurity Architect

Xylem is a Fortune 500 global water solutions company dedicated to advancing sustainable impact and empowering the people who make water work every day. As a leading water technology company with 23,000 employees operating in over 150 countries, Xylem is at the forefront of addressing the world's most critical water challenges. We invite passionate individuals to join our team, dedicated to exceeding customer expectations through innovative and sustainable solutions.

THE ROLE:

Xylem is seeking Endpoint Cybersecurity Architect to design, implement, and manage endpoint security solutions across our enterprise. This role will play a critical part in protecting our organization from cyber threats by ensuring the security, compliance, and resilience of endpoint devices including workstations, servers, mobile devices, and other network-connected assets. In addition to endpoint security across the various platforms, this position will also be responsible for PKI, DLP, and insider threat strategies.

This position will report directly to Xylem’s Director of Cybersecurity Architecture & Engineering. The position will require collaboration with IT infrastructure, cyber defense, security compliance, product security, software development and other internal functional groups (Legal, Procurement, and Finance) to ensure that the strategy and execution elements of Global Cybersecurity meets the need of Xylem.

CORE RESPONSIBILITIES:

Architect, design, and implement endpoint security solutions to protect against malware, ransomware, phishing, and advanced persistent threats (APTs).
Develop business cases, high level design documents, security standards, policies, and best practices for endpoint security, PKI, DLP, and Insider Threat.
Participate in the evaluation, deployment, and management of endpoint detection and response (EDR), antivirus, and other endpoint security tools.
Perform threat modeling and risk assessments to identify potential vulnerabilities and recommend security enhancements.
Collaborate with IT, security operations, and risk management teams to ensure security measures are integrated into the enterprise infrastructure.
Monitor emerging security threats and industry trends to enhance endpoint security strategies.
Ensure compliance with relevant security frameworks and regulatory requirements (e.g., NIST, CIS, ISO 27001, HIPAA, GDPR).
Provide technical guidance and mentorship to junior security engineers and IT staff.
Contribute to the development and evolution of application, platforms, cloud services and infrastructure security reference and target architectures.
Participate in Mergers, Acquisitions, and Divestiture engagements as needed for secure endpoint migration and due diligence.
Prepare monthly metrics reports showing current state and advances made in Cybersecurity.

REQUIRED QUALIFICATIONS:

Bachelor's degree in computer science, Cybersecurity, Information Technology, or a related field (or equivalent work experience).
Minimum 10+ years of increasingly diverse and complex experience in field of Cybersecurity within a global environment, with at least a minimum 5+ years of experience focusing on endpoint security architecture and engineering.
Strong knowledge of endpoint security technologies, including EDR/XDR, SIEM, next‑gen AV (CrowdStrike, Microsoft Defender ATP, SentinelOne, Carbon Black), and DLP, PKI, and Insider Threat controls.
Hands-on experience with endpoint hardening, policy enforcement, and security configuration management through Group Policy, InTune and other endpoint control mechanisms for both windows and Mac.
Knowledge of scripting and automation (e.g., Python, PowerShell, Bash) for security operations.
Familiarity with security frameworks and compliance requirements (NIST, CIS, MITRE ATT&CK, ISO 27001, HIPAA, GDPR, etc.).
Experience with zero-trust security models and identity-based security controls.
Strong analytical and problem-solving skills with the ability to work independently and collaboratively.
Excellent communication and documentation skills.

PREFERRED QUALIFICATIONS:

Industry certifications such as CISSP, CISM, CEH, GIAC (GCIH, GCED, GSEC), or Microsoft Security certifications.
Experience working in cloud security environments (AWS, Azure, Google Cloud) with a focus on endpoint protection.
Knowledge of Mobile Device Management (MDM) and security solutions (Intune, JAMF, Workspace ONE).
Master’s Degree in Cybersecurity

Join the global Xylem team to be a part of innovative technology solutions transforming water usage, conservation, and re-use. Our products impact public utilities, industrial sectors, residential areas, and commercial buildings, with a commitment to providing smart metering, network technologies, and advanced analytics for water, electric, and gas utilities. Partner with us in creating a world where water challenges are met with ingenuity and dedication; where we recognize the power of inclusion and belonging in driving innovation and allowing us to compete more effectively around the world.

At Xylem, you'll not only contribute to solving water issues but also have the chance to make a difference through our paid Volunteer Program, Xylem Watermark. We prioritize our employees' well-being through inclusion and belonging as well as our Employee Resource Groups (ERG). Proud to be an Equal Employment Opportunity (including disability and veterans) and Affirmative Action workplace, Xylem fosters an inclusive environment free from discrimination or harassment.

Please note that the information in this job description outlines the general nature of the position and is not an exhaustive list of duties. Xylem is dedicated to providing reasonable accommodations to enable all employees to perform their essential job functions. We reserve the right to modify this job description and assign additional duties as needed. Embrace the opportunity to be part of Xylem's transformative journey in shaping the future of water technology! #XylemCareers #GlobalImpact #WaterInnovation

Details

Location

Charlotte, NC, USA

Experience

Min. 10 yearsMinimum 10+ years of increasingly diverse and complex experience in field of Cybersecurity within a global environment, with at least a minimum 5+ years of experience focusing on endpoint security architecture and engineering.

Technologies

Crowdstrike

THE ROLE:

CORE RESPONSIBILITIES:

Architect, design, and implement endpoint security solutions to protect against malware, ransomware, phishing, and advanced persistent threats (APTs).
Develop business cases, high level design documents, security standards, policies, and best practices for endpoint security, PKI, DLP, and Insider Threat.
Participate in the evaluation, deployment, and management of endpoint detection and response (EDR), antivirus, and other endpoint security tools.
Perform threat modeling and risk assessments to identify potential vulnerabilities and recommend security enhancements.
Collaborate with IT, security operations, and risk management teams to ensure security measures are integrated into the enterprise infrastructure.
Monitor emerging security threats and industry trends to enhance endpoint security strategies.
Ensure compliance with relevant security frameworks and regulatory requirements (e.g., NIST, CIS, ISO 27001, HIPAA, GDPR).
Provide technical guidance and mentorship to junior security engineers and IT staff.
Contribute to the development and evolution of application, platforms, cloud services and infrastructure security reference and target architectures.
Participate in Mergers, Acquisitions, and Divestiture engagements as needed for secure endpoint migration and due diligence.
Prepare monthly metrics reports showing current state and advances made in Cybersecurity.

REQUIRED QUALIFICATIONS:

Bachelor's degree in computer science, Cybersecurity, Information Technology, or a related field (or equivalent work experience).
Minimum 10+ years of increasingly diverse and complex experience in field of Cybersecurity within a global environment, with at least a minimum 5+ years of experience focusing on endpoint security architecture and engineering.
Strong knowledge of endpoint security technologies, including EDR/XDR, SIEM, next‑gen AV (CrowdStrike, Microsoft Defender ATP, SentinelOne, Carbon Black), and DLP, PKI, and Insider Threat controls.
Hands-on experience with endpoint hardening, policy enforcement, and security configuration management through Group Policy, InTune and other endpoint control mechanisms for both windows and Mac.
Knowledge of scripting and automation (e.g., Python, PowerShell, Bash) for security operations.
Familiarity with security frameworks and compliance requirements (NIST, CIS, MITRE ATT&CK, ISO 27001, HIPAA, GDPR, etc.).
Experience with zero-trust security models and identity-based security controls.
Strong analytical and problem-solving skills with the ability to work independently and collaboratively.
Excellent communication and documentation skills.

PREFERRED QUALIFICATIONS:

Industry certifications such as CISSP, CISM, CEH, GIAC (GCIH, GCED, GSEC), or Microsoft Security certifications.
Experience working in cloud security environments (AWS, Azure, Google Cloud) with a focus on endpoint protection.
Knowledge of Mobile Device Management (MDM) and security solutions (Intune, JAMF, Workspace ONE).
Master’s Degree in Cybersecurity