IoT Security Architect

This is a fully remote position, open to applicants in Illinois.

📋 Description

• Take ownership of security architecture and posture across device fleets, edge platforms, and associated cloud, web, and identity services.

• Lead the rationalization of platforms towards a cohesive target state.

• Collaborate with senior business, product, engineering, operations, and security stakeholders to synchronize priorities.

• Convert business context into security requirements, assess security risks in terms of business impact, and translate decisions into actionable engineering guidance.

• Act as the security design authority for interconnected systems within Grainger’s architecture governance process.

• Influence hardware, platform, and vendor choices early in the architecture lifecycle.

• Oversee security architecture for cloud platforms, web applications, and APIs while managing the fleet.

• Collaborate with domain architects on cloud identity and access management (IAM), web application firewalls, API protection, and secrets management.

• Direct threat modeling for devices, edge platforms, connectivity, cloud services, web applications, APIs, and field workflows.

• Establish measurable security baselines for commercial and embedded field devices, covering hardening, secure boot, disk encryption, and endpoint detection and response.

• Develop secure delivery methods for edge software and AI models, including signing, provenance, staged rollouts, rollbacks, and software/model bills of materials.

• Safeguard edge AI models and inference while balancing security, privacy, latency, cost, and customer experience.

• Create device trust architectures that encompass unique identities, secure onboarding, PKI, certificate lifecycle management, secrets protection, mutual authentication, and least-privilege device messaging.

• Design identity and access frameworks for devices, services, technicians, administrators, vendors, and customers.

• Architect secure connectivity options across cellular, satellite, Wi-Fi, and wired deployments, including carrier strategy, failover options, and isolation from customer networks.

• Influence endpoint and fleet telemetry, vulnerability management, compromised-device containment, and recovery in collaboration with engineering and security operations teams.

• Present security posture to leadership through key metrics and KPIs.

• Mentor peers and junior architects during design reviews.

• Report directly to the Director of Cybersecurity Architecture.

⛳️ Requirements

• Extensive expertise in security architecture for large-scale IoT, embedded, or edge systems, along with broad experience in enterprise architecture.

• Over 10 years of experience in information security or a related engineering field.

• More than 8 years dedicated to security architecture across various domains.

• At least 4 years of focus on IoT, embedded, or edge systems.

• Preferred: experience in connected retail, industrial IoT, robotics, or similar edge devices.

• Preferred: certifications such as CISSP, CCSP, or relevant cloud, Linux, or industrial cybersecurity credentials.

• Demonstrated ability to align senior stakeholders on multi-year strategies and rationalize overlapping or acquired technology portfolios through capability mapping and migration strategies.

• Strong background with cloud-connected IoT and network architectures, including edge runtimes, MQTT, messaging authorization, segmentation from customer environments, and various connectivity options (cellular, satellite, Wi-Fi, and wired).

• Solid experience in cloud, application, and identity architecture, including cloud IAM, web application firewalls, API gateways, secrets management, federation, MFA, and privileged access management.

• Expert knowledge of device trust and device-scale PKI, encompassing hardware roots of trust (TPM, secure elements, HSMs), secure and measured boot, attestation, certificate rotation and revocation, and failure modes.

• Proven experience in hardening commercial and embedded operating systems to meet IoT security standards, including endpoint detection and response, vulnerability management, and secure OTA updates with signing and rollback protection.

• Experience in defining fleet security telemetry, containment, and recovery patterns, and converting incident findings into architecture enhancements.

• Familiarity with edge computer vision security, including model protection, adversarial inputs, MLOps across edge and cloud, and privacy obligations for camera and sensor data.

• Excellent communication skills, including the ability to convey technical concepts to executives and defend architectural decisions with supporting evidence.

🏝️ Benefits

• Medical, dental, vision, and life insurance plans with coverage beginning on day one.

• Six complimentary sessions annually with a licensed therapist.

• Eighteen paid time off (PTO) days each year for full-time employees.

• Six company holidays each year.

• 6% company contribution to a 401(k) Retirement Savings Plan each pay period, with no employee contribution required.

• Employee discounts available.

• Tuition reimbursement offered.

• Student loan refinancing assistance.

• Complimentary access to financial counseling, education, and tools.

• Maternity support programs provided.

• Nursing benefits available.

• Up to 14 weeks of paid leave for birth parents.

• Up to 4 weeks of paid leave for non-birth parents.

• Incentive target of up to 20% based on individual and company performance objectives.