IT Security Architecture Technical Lead - Endpoint

Job Family:

IT Cyber Security

Travel Required:

Up to 10%

Clearance Required:

None

What You Will Do:

Our Security Architecture Technical Lead - Endpoint is a technical leader focused on IT Security solutions research, design, implementation, testing, and documentation for all corporate, virtual, and personal Windows and mobile endpoints. They will work hand in hand with the IT Security Architecture team and the IT Architecture team but are focused on the IT Security equities within the endpoint environment.

Effectively leads and manages complex IT Security Architecture projects that may span company-wide initiatives within scope, timeline, and budget. Applies technical knowledge to innovation and performance improvement while demonstrating critical thinking and sound logic when assessing problems and opportunities in generating solutions.

Contributes to ensuring the current and future over the horizon capabilities of Guidehouse security systems, maintaining, and protecting Guidehouse and Client data to meet the NIST SP 800-171, NIST SP 800-53, ISO 27001, ISO 20000, HIPAA, and HITRUST standards. Contributes to keeping Guidehouse abreast of all the best of breed capabilities that continue to make Guidehouse a technology pathfinder within the industry. Reports directly to the Chief Information Security Architect.

Job Function:

• Assists in the organization, development and implementation of IT Security Architecture initiatives that support overall IT Security goals and objectives that may span company-wide initiatives
• Demonstrates clear and effective written and verbal communication skills; delivered in a professional, respectful, and timely manner
• Produces “client-ready” deliverables and helps manage the quality of IT Security Architecture’s work products based on established or establishing KPIs and applicable professional standards and best practices, including appropriate methodologies, tools, and resources
• Structures work product that clearly conveys complex issues; synthesizing various inputs to articulate a clear point of view, as needed
• Identifies critical issues to be communicated and inform all appropriate stakeholders; adapting messages and approach based on the audience
• Configure and maintain security frameworks for all endpoints, ensuring they comply with regulatory requirements and industry standards
• Documents and maintains the Endpoint Security Architecture framework
• Assists in conducting risk assessments and security audits to identify vulnerabilities and recommending mitigations to enhance security posture
• Develop a plan to monitor and automate reconciliation of device misconfigurations and configuration drift
• Assist with the development of multiple security profiles based on specialized device requirements
• Design and implement a strategy for reducing privileges on the endpoint to reduce risk and align with the core principles of a Zero Trust strategy
• Design and implement a strategy for data protection on both corporate and personal devices
• Configure and maintain endpoint threat protection using Microsoft Defender for Endpoint, ASR, and Device Control policies
• Design and implement a strategy for passwordless authentication for the endpoints
• Configures and assists with management of Microsoft Defender XDR, BeyondTrust Privilege Management, and Absolute Secure Endpoint,
• Configures and assists with management of specialized data classifications and data protection mechanisms
• Designs and configures monitoring and alerts using Microsoft Defender XDR in accordance with Guidehouse Policies, Standards, and Procedures
• Assists with the development of incident response strategies and efforts to address security incidents and breaches, minimizing impact on business operations
• Demonstrates active listening skills that contribute to deeper understanding of the team and client
• Engages in complex technical discussions, ask open-ended questions where appropriate, suggest specific actions, and identify next steps
• Demonstrates honest and professional behavior in all interactions
• Helps keep the technical services provided to clients in compliance with regulations, laws, policies and procedures
• Anticipates and proposes solutions for areas of potential risk, resolving and/or escalating issues when appropriate
• Learns to assume and embrace an appropriate level of risk
• Contributes to risk mitigation and contingency planning in alignment with IT Security leadership guidance
• Uses creativity, analytical thinking, and good judgment to develop new technical solutions that solve complex problems
• Identifies and i