[Hiring] Senior Configuration Management Security Architect @Axiom Path

Role Description

Join a global financial services organization committed to strengthening enterprise cybersecurity, improving operational resilience, and advancing security engineering through automation and standardized controls. This opportunity sits within an enterprise Engineering & Automation transformation initiative focused on modernizing endpoint security, establishing consistent configuration standards, and reducing manual compliance processes.

• Remote opportunity – United States only, as specified in the latest requisition comments.
• Engagement: W2 only (no C2C/1099).
• Contribute to a global cybersecurity transformation initiative focused on enterprise configuration management and automated compliance.
• Work across cybersecurity architecture, engineering, governance, risk management, and technology operations.
• Help establish scalable security standards and automation capabilities across a complex international technology environment.
• Participate in initiatives involving security tool consolidation, continuous compliance monitoring, and operational security improvements.

Qualifications

• 5–7 years of relevant experience in cybersecurity architecture, security engineering, configuration management, or related enterprise security disciplines.
• Strong hands-on experience implementing secure configuration standards and security hardening practices across enterprise technology environments.
• Demonstrated expertise with CIS Benchmarks, including assessing configuration compliance, identifying gaps, and implementing remediation strategies.
• Experience designing or supporting automated security compliance validation and configuration monitoring capabilities.
• Knowledge of policy-as-code principles and automated security control enforcement.
• Strong understanding of configuration drift detection, exception management, security remediation, and ongoing control validation.
• Experience supporting security governance, risk management, regulatory compliance, and internal audit requirements.
• Ability to develop technical security standards, implementation guidance, and audit-supporting documentation.
• Experience evaluating security tools and identifying opportunities to simplify, consolidate, or improve enterprise security capabilities.
• Understanding of cybersecurity architecture principles and the integration of security controls into enterprise technology operations.
• Strong analytical and problem-solving skills with the ability to translate security requirements into practical technical solutions.
• Excellent communication and stakeholder management skills, particularly when coordinating across engineering, operations, security, and compliance teams.
• Ability to independently manage technical initiatives, influence decisions, and drive measurable security improvements across geographically distributed teams.

Requirements

• Lead the development and implementation of enterprise secure configuration standards aligned with CIS Benchmarks and established cybersecurity frameworks.
• Design and improve configuration management architecture to strengthen security consistency across endpoints and enterprise technology environments.
• Develop and implement automated compliance validation processes that identify configuration deviations, security gaps, and policy violations.
• Advance policy-as-code practices to improve the consistency, repeatability, and scalability of security configuration enforcement.
• Establish processes for detecting configuration drift, evaluating exceptions, tracking remediation activities, and maintaining ongoing compliance.
• Collaborate with security engineering and technology operations teams to integrate secure configuration requirements into existing operational workflows.
• Strengthen audit readiness by developing reliable compliance evidence, control documentation, and reporting capabilities that support internal audit and regulatory expectations.
• Evaluate existing security and configuration management tools, identify overlapping capabilities, and support technology rationalization initiatives.
• Partner with cybersecurity, risk, compliance, procurement, finance, and technology stakeholders to align technical security improvements with enterprise governance requirements.
• Drive initiatives from initial assessment and architectural recommendations through implementation, validation, documentation, and sustainable operational adoption.