Estée Lauder Cybersecurity Architect and Zero Trust Solution Engineer

Role & Responsibilities

• Lead architecture design and implementation of Illumio microsegmentation and Zero Trust network controls across data centers, cloud, and OT environments
• Develop enterprise security architecture blueprints defining segmentation strategy, enforcement zones, and secure communication pathways
• Integrate Illumio with security ecosystems including CMDB, SIEM, SOAR, and vulnerability management tools
• Provide architectural governance and design reviews ensuring consistent adoption of Zero Trust principles across the organization
• Collaborate with infrastructure, cloud, and application teams to design secure workload architectures and define security guardrails
• Create architecture standards, reference designs, and policy frameworks for segmentation and secure access
• Assess emerging threats and technologies, recommending architectural improvements that enhance visibility and containment
• Support risk assessments, compliance initiatives, and technology evaluations for network and workload segmentation
• Mentor security engineers and drive knowledge sharing around Illumio architecture, enforcement best practices, and operational handoffs
• Partner with ECR team members, IT stakeholders, and business owners to identify and evaluate technology and cyber risks
• Develop and manage productive working relationships with vendors, business partners, and service providers
• Ensure disaster recovery policies and procedures are effectively implemented in partnership with IT teams
• Review and triage identified risks, evaluating severity and defining remediation pathways
• Provide architectural recommendations for risk mitigation based on severity and business context
• Maintain project management documentation tracking tasks, status, ownership, issue closure, and timelines
• Coordinate cross-functional project teams to track remediation status and report progress to governance meetings
• Prepare and deliver risk reports and dashboards on scheduled basis including vulnerability and threat analysis

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field
• 7+ years of experience in cybersecurity architecture or engineering, with focus on enterprise or hybrid environments
• 3+ years of hands-on experience with Illumio Core and/or Edge, including policy design, PCE/VEN management, and segmentation strategy
• Strong understanding of Zero Trust Architecture (ZTA) and lateral movement defense techniques
• Experience in network and cloud architecture (Azure, AWS, GCP) and containerized environments (Kubernetes, Docker)
• Proficiency in Excel, PowerPoint, and Power BI reporting
• Deep understanding of TCP/IP, routing, firewalls, DNS, and access control
• Experience designing Zero Trust enforcement policies and segmentation models (role-based, app-based, and zone-based)
• Hands-on exposure to Illumio integrations (SIEM, SOAR, CMDB, EDR, or vulnerability tools)
• Familiarity with identity-centric architectures, Zero Trust Network Access (ZTNA), and microsegmentation alternatives (Cisco Secure Workload, Guardicore, etc.)
• Strong skills in automation and scripting (Python, REST APIs, PowerShell)
• Ability to map complex application dependencies for segmentation and risk prioritization
• Natural leader with demonstrated ability to inspire and guide collaborative teams
• Effective communicator with strong analytical and problem-solving capabilities
• Meticulous attention to detail in designing and implementing secure processes
• Proven ability to build strong partnerships across highly collaborative environments

Skills

Experience

7+ years of experience in cybersecurity architecture or engineering, with focus on enterprise or hybrid environments. 3+ years of hands-on experience with Illumio Core and/or Edge, including policy design, PCE/VEN management, and segmentation strategy. Demonstrated success in managing complex security architecture projects and programs with proven leadership capabilities.

Education

Bachelor's degree in Computer Science, Information Security, or related field, or equivalent professional experience in technology and cybersecurity domains.

Workplace

About Cerulean

Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.